Comments on: Finding All Hosts On the LAN From Linux / Windows Workstation

By: Lukas

Lukas — Tue, 24 Jan 2012 14:54:34 +0000

Hi, i cant find all hosts by nmap -sP 10.6.0.0/24
I know that router Mikrotik has got IP address 10.6.0.1, hi can i found with nmap ALL hosts at subnet? Which mode of nmap I have to use for this?
Could you help me, please? Thanks a lot.

Lukas

By: jags

jags — Sun, 08 Jan 2012 07:07:08 +0000

this is awesome

By: Rodger

Rodger — Mon, 02 Jan 2012 08:07:31 +0000

Using cygwin on Windows, this did not work as expected.
It produced
192.168.1.1 UP
…
192.168.1.100 UP
…
for every IP address.

Problem is, this network is 192.168.2.1, not 192.168.1.1

Further investigation:
ping 192.168.2.1 produced a response from an IP from the ISP.

Know and Test what you are doing!

By: Ryan Sharp

Ryan Sharp — Mon, 26 Dec 2011 00:31:49 +0000

Looping in Perl just to print a sequence of numbers is really braindead.

By: Stan Tkhorovsky

Stan Tkhorovsky — Fri, 18 Nov 2011 18:28:10 +0000

Thanks for ‘nast -m’ tip (3 years later ;) ) – liked it best.

@ lina – check out casper’s comment regarding non-Linux systems

By: lina

lina — Wed, 13 Jul 2011 01:55:49 +0000

How would you do this on a Mac? I tried it and got the error -bash: seq: command not found

By: James

James — Mon, 20 Jun 2011 13:58:16 +0000

Here’s a batchfile i made that pings any range of adresses:

@echo off & For /L %%i in (%4,1,255) do @ping -n 1 %1.%2.%3.%%i | find “Received = 0″ >nul & if errorlevel 1 @echo %1.%2.%3.%%i

most of the code is to tidy the output up. Save as PINGER.bat

Type:
PINGER 192 168 0 0
**without** the dots to find the range 192.168.0.0 to 192.168.0.255
or any other address PINGER 145 233 2 0 etc
cheers

By: berner

berner — Tue, 24 May 2011 18:24:10 +0000

Very nice, all that. Thanks guys!

By: rst_ack

rst_ack — Wed, 09 Feb 2011 19:05:39 +0000

#arp-scan -l

By: horizons

horizons — Wed, 08 Dec 2010 00:07:26 +0000

smbtree -SN |grep \\\\ |cut -f2 |cut -d”\\” -f3

will give a list of netbios host responding on broadcast address
(smbtree is part of the samba suite)

By: mr

mr — Wed, 25 Aug 2010 10:32:15 +0000

check out the space after the n parameter: for /L %I in (1,1,254) DO ping -w 30 -n 1 192.168.1.%I | find “Reply”

By: hotsw4p

hotsw4p — Sat, 24 Jul 2010 00:22:58 +0000

i liked the nmap solution best as well, thanks Matthias for that.

By: nishu

nishu — Sun, 18 Apr 2010 21:55:26 +0000

can anyone tell how to see the network address and system names in up in lan in linux..

By: Remi Nodet

Remi Nodet — Thu, 04 Jun 2009 08:54:44 +0000

Even faster (produces a little bit of confusing output in the beginning but it does the job fast):


for ip in $(perl -e '$,="\n"; print 1 .. 254;') ; do  ping -t 1 -c 1 192.168.146.$ip > /dev/null && echo "192.168.146.$ip UP" >> hosts.log || : & sleep 0.02; done; sleep 1;cat hosts.log;rm hosts.log

By: Johny

Johny — Wed, 06 May 2009 18:52:56 +0000

Matthias, thumbs up for the nmap solution.

By: suren

suren — Sun, 16 Mar 2008 04:28:58 +0000

wont this command do ???

nbtscan 10.0.0.1-125

this checks all the computers whose ip address are in the range of 10.0.0.1 to 10.0.0.125 and displays only those which are ON and connected to the network !

By: sg

sg — Fri, 07 Mar 2008 16:29:33 +0000

another option is installing arpwatch.

By: phillip

phillip — Fri, 07 Mar 2008 12:42:27 +0000

Using nast ?

http://netsecure.alcpress.com/nast/

nast -m

best.

By: Z3n0

Z3n0 — Thu, 06 Mar 2008 10:13:44 +0000

Something wrong with prev. comment… (< and > char)
for (( ip=1 ; ip<=254 ; ip++ )); do ping -c 1 -t 1 192.168.1.$ip>/dev/null; [ $? -eq 0 ] && echo "192.168.1.$ip UP" || : ; done

By: matthias

matthias — Thu, 06 Mar 2008 09:40:36 +0000

If a host on your local network won’t answer on a ping request you could try arping, which does an arp request.
arping 192.168.1.1 ARPING 192.168.1.1 from 192.168.1.226 eth0 Unicast reply from 192.168.1.1 [00:01:02:xx:xx:xx] 0.668ms

Another method is simply using nmap:
nmap -sP 192.168.1.0/24