Networking Question For Tech Guys

Brettster · March 14, 2005

A simple question for you I.T. guys perhaps

is there an easy way to check what IP numbers are in use on a network without having to ping each number one at a time?

maybe something that creates an IP map of the network?

im looking for something free or built into XP or Win 2k

thanks guys :)

Dave W · March 14, 2005

A simple question for you I.T. guys perhaps
is there an easy way to check what IP numbers are in use on a network without having to ping each number one at a time?

maybe something that creates an IP map of the network?

im looking for something free or built into XP or Win 2k

thanks guys :)

←

Something like this http://www.angryziber.com/ipscan/ would do the job, or alternatively do a google search on 'ipscan'

Dave

ColinBarber · March 14, 2005

If you have access to the routers you can network map much easier/quicker than a ip sweep.

Also if there are IDS devices on the network you may well generate alarms by sweeping.

Brettster · March 14, 2005

Thanks for the tips guys

the only access I have to routers are netgear broadband routers

not the main system router

can I do the map from these?

ColinBarber · March 14, 2005

No.

What are you trying to map?

bitonw · March 14, 2005

arp

Brettster · March 14, 2005

No.
What are you trying to map?

←

At work we have a main server, and about 60 ports, but the ports are no longer in any order and some computers have been taken away and replaced over time, now there are some new computers coming that need setting up so i wanted to reuse the old ports without causing any IP conflicts.

I cannot add more ports as I dont have access to the main server and I wouldnt know how to add them even if i could, so I was just looking for an easy way to find what IP numbers i can use.

thanks for the help :)

Brettster · March 14, 2005

arp

←

What is ARP?

is it free?

aido · March 14, 2005

The Arp cache contains a lookup containing MAC Addresses and IP addresses.

On Windows I think you run "arp -a" and on the Cisco kit it used to be "sh arp" I think

The command is built into Windows

If you run that command on the networking kit you would see all of the recently active devices.

If you've only got 60 devices on the network you're probably only running a single 24 bit subnet - just a thought but are all the clients using DHCP assigned addresses or are they configured to use Static IP's? When you do an "ipconfig /all" it will say DHCP Enabled true or false I think, can't remember the exact wording, its all simpler on the Mac :P

If you're using DHCP it wouldn't be a problem as the server would dish out an available address from the pool and lease it to the client temporarily...

Are all these boxes on the same site then?

Neil Clarke · March 14, 2005

PM me your email address and I will send you a scanning tool (but don't tell anyone!)

It's called SuperScan.

Neil

aido · March 14, 2005

Superscan is excellent :)

Neil Clarke · March 14, 2005

Alternatively.....

Go here http://www.webattack.com/get/superscan.shtml

Hope this helps.

Neil

el_gencer · March 14, 2005

download this software :-

http://www.inetcat.org/software/nbtscan1_5_1.zip

its called nbtscan, unzip it into c:\windows\system32

load a command prompt and type in the prompt

nbtscan 192.168.0.1-255

the above is an example using a class c 192.168.0.0 network, subsitute this with your ip range. or you could type

nbtscan 192.168.0.1/24

does the same thing, just less to type.

tell me if i'm being too techy.

Brettster · March 14, 2005

Thanks I will give those apps a go :)

Aido they are all in the same site and are manually configured IP's

I wish they were DHCP would make my life so much easier hehe

aido · March 14, 2005

Are they all on the same subnet then mate?

One thing to be wary of is that these ping scanners won't pick up machines with some personal firewall software if it is blocking ICMP echo's, it's a right pain in the arse!

I usually use Superscan and then go through the addresses it lists as free - if you get an IP conflict when you use an IP that's not responding you know you're hit one running firewall software :(

We use the Cisco VPN client at work and that is a bugger for enabling it's own firewall :(

Brettster · March 15, 2005

yes they are all on same 10.0.1.XX subnet

its not a fancy network

but I seem to have ended up looking after it!!

thanks for the tips :)

ColinBarber · March 15, 2005

We use the Cisco VPN client at work and that is a bugger for enabling it's own firewall :(

←

Shouldn't do unless it is connected. What version are you running?

RX-Men-8 · March 15, 2005

Alternatively.....
Go here http://www.webattack.com/get/superscan.shtml

Hope this helps.

Neil

←

What you didn't say ist that Superscan gets deleted by your virusscanner (Network Associates) immediately ;)

Cheers,

RX-Men-8

Brettster · March 15, 2005

I tried the angry IP app and it worked a treat

very easy and clear to understand

thanks guys :)

always a mine of infomation :)

aido · March 15, 2005

Shouldn't do unless it is connected. What version are you running?

←

Ah that sounds about right as we're always VPN'd in - think it's v4.x of the client but not sure of the top of my head, it's the newer version for XP anyway....