version 1.1.1.1, 2012/02/21 22:16:27
|
version 1.1.1.2, 2014/06/15 16:26:43
|
Line 5
|
Line 5
|
arping \- sends arp and/or ip pings to a given host |
arping \- sends arp and/or ip pings to a given host |
.PP |
.PP |
.SH "SYNOPSIS" |
.SH "SYNOPSIS" |
\fBarping\fP [-abdDeFhpqrRd0uv] [-S \fIhost/ip\fP] [-T \fIhost/ip\fP] [-s \fIMAC\fP] [-t \fIMAC\fP] [-c \fIcount\fP] [-i \fIinterface\fP] [ -w \fIus\fP ] <\fIhost\fP | -B> | \fBarping\fP [\-0aAbBdDeFhpqrRuUv] [\-S \fIhost/ip\fP] [\-T \fIhost/ip\fP] [\-s \fIMAC\fP] [\-t \fIMAC\fP] [\-c \fIcount\fP] [\-i \fIinterface\fP] [ \-w \fIus\fP ] <\fIhost\fP | \-B> |
.PP |
.PP |
\fBarping\fP --help | \fBarping\fP \-\-help |
.PP |
.PP |
.SH "DESCRIPTION" |
.SH "DESCRIPTION" |
The \fIarping\fP utility sends \fBARP\fP and/or \fBICMP\fP requests to the specified \fIhost\fP and displays the replies\&. The \fIhost\fP may be specified by its \fBhostname\fP, its \fBIP\fP address, or its \fBMAC\fP address\&. |
The \fIarping\fP utility sends \fBARP\fP and/or \fBICMP\fP requests to the specified \fIhost\fP and displays the replies\&. The \fIhost\fP may be specified by its \fBhostname\fP, its \fBIP\fP address, or its \fBMAC\fP address\&. |
.PP |
.PP |
One request is sent each second\&. |
One request is sent each second\&. |
.PP |
.PP |
When pinging an IP an ARP who-has query is sent\&. When pinging a MAC | When pinging an IP an ARP who\-has query is sent\&. When pinging a MAC |
address a directed broadcast ICMP Echo request is sent\&. For more |
address a directed broadcast ICMP Echo request is sent\&. For more |
technical explaination and an FAQ, see the README file\&. |
technical explaination and an FAQ, see the README file\&. |
.PP |
.PP |
\fINote on timing\fP |
\fINote on timing\fP |
.PP |
.PP |
ARP packets are usually replied to (on a LAN) so fast that the OS task |
ARP packets are usually replied to (on a LAN) so fast that the OS task |
scheduler can\&'t keep up to get exact enough timing\&. | scheduler can\(cq\&t keep up to get exact enough timing\&. |
On an idle system the roundtrip times will be pretty much accurate, but |
On an idle system the roundtrip times will be pretty much accurate, but |
with more load the timing gets less exact\&. |
with more load the timing gets less exact\&. |
.PP |
.PP |
To get more exact timing on a non-idle system, re-nice arping to -15 or so\&. | To get more exact timing on a non\-idle system, re\-nice arping to \-15 or so\&. |
.PP |
.PP |
# nice -n -15 arping foobar | # nice \-n \-15 arping foobar |
.PP |
.PP |
This is not just an issue with arping, it is with normal ping also |
This is not just an issue with arping, it is with normal ping also |
(at least it is on my system)\&. But it doesn\&'t show up as much with ping | (at least it is on my system)\&. But it doesn\(cq\&t show up as much with ping |
since arping packets (when pinging IP) doesn\&'t traverse the IP stack when | since arping packets (when pinging IP) doesn\(cq\&t traverse the IP stack when |
received and are therefore replied to faster\&. |
received and are therefore replied to faster\&. |
.PP |
.PP |
.SH "OPTIONS" |
.SH "OPTIONS" |
|
|
.PP |
.PP |
.IP "--help" | .IP "\-\-help" |
Show extended help\&. Not quite as extensive as this manpage, |
Show extended help\&. Not quite as extensive as this manpage, |
but more than -h\&. | but more than \-h\&. |
.IP "-0" | .IP "\-0" |
Use this option to ping with source IP address 0\&.0\&.0\&.0\&. Use this |
Use this option to ping with source IP address 0\&.0\&.0\&.0\&. Use this |
when you haven\&'t configured your interface yet\&. | when you haven\(cq\&t configured your interface yet\&. |
Note that this may get the MAC-ping unanswered\&. | Note that this may get the MAC\-ping unanswered\&. |
This is an alias for -S 0\&.0\&.0\&.0\&. | This is an alias for \-S 0\&.0\&.0\&.0\&. |
.IP "-a" | .IP "\-a" |
Audible ping\&. |
Audible ping\&. |
.IP "-A" | .IP "\-A" |
Only count addresses matching requested address (This *WILL* |
Only count addresses matching requested address (This *WILL* |
break most things you do\&. Only useful if you are arpinging many |
break most things you do\&. Only useful if you are arpinging many |
hosts at once\&. See arping-scan-net\&.sh for an example)\&. | hosts at once\&. See arping\-scan\-net\&.sh for an example)\&. |
.IP "-b" | .IP "\-b" |
Like -0 but source broadcast source address (255\&.255\&.255\&.255)\&. | Like \-0 but source broadcast source address (255\&.255\&.255\&.255)\&. |
Note that this may get the arping unanswered since it\&'s not normal behavior | Note that this may get the arping unanswered since it\(cq\&s not normal behavior |
for a host\&. |
for a host\&. |
.IP "-B" | .IP "\-B" |
Use instead of host if you want to address 255\&.255\&.255\&.255\&. |
Use instead of host if you want to address 255\&.255\&.255\&.255\&. |
.IP "-c \fIcount\fP" | .IP "\-c \fIcount\fP" |
Only send \fIcount\fP requests\&. |
Only send \fIcount\fP requests\&. |
.IP "-d" | .IP "\-d" |
Find duplicate replies\&. Exit with 1 if there are answers from |
Find duplicate replies\&. Exit with 1 if there are answers from |
two different MAC addresses\&. |
two different MAC addresses\&. |
.IP "-D" | .IP "\-D" |
Display answers as dots and missing packets as exclamation points\&. | Display answers as exclamation points and missing packets as dots\&. |
Like flood ping on a Cisco\&. |
Like flood ping on a Cisco\&. |
.IP "-e" | .IP "\-e" |
Like -a but beep when there is no reply\&. | Like \-a but beep when there is no reply\&. |
.IP "-F" | .IP "\-F" |
Don\&'t try to be smart about the interface name\&. Even if this | Don\(cq\&t try to be smart about the interface name\&. Even if this |
switch is not given, -i disables this smartness\&. | switch is not given, \-i disables this smartness\&. |
.IP "-h" | .IP "\-h" |
Displays a help message and exits\&. |
Displays a help message and exits\&. |
.IP "-i \fIinterface\fP" | .IP "\-i \fIinterface\fP" |
Don\&'t guess, use the specified interface\&. | Don\(cq\&t guess, use the specified interface\&. |
.IP "-p" | .IP "\-p" |
Turn on promiscious mode on interface, use this if you don\&'t | Turn on promiscious mode on interface, use this if you don\(cq\&t |
"own" the MAC address you are using\&. | \(dq\&own\(dq\& the MAC address you are using\&. |
.IP "-q" | .IP "\-q" |
Does not display messages, except error messages\&. |
Does not display messages, except error messages\&. |
.IP "-r" | .IP "\-r" |
Raw output: only the MAC/IP address is displayed for each reply\&. |
Raw output: only the MAC/IP address is displayed for each reply\&. |
.IP "-R" | .IP "\-R" |
Raw output: Like -r but shows "the other one", can be combined with | Raw output: Like \-r but shows \(dq\&the other one\(dq\&, can be combined with |
-r\&. | \-r\&. |
.IP "-s \fIMAC\fP" | .IP "\-s \fIMAC\fP" |
Set source MAC address\&. You may need to use -p with this\&. | Set source MAC address\&. You may need to use \-p with this\&. |
.IP "-S \fIIP\fP" | .IP "\-S \fIIP\fP" |
Like -b and -0 but with set source address\&. | Like \-b and \-0 but with set source address\&. |
Note that this may get the arping unanswered if the target does not have |
Note that this may get the arping unanswered if the target does not have |
routing to the IP\&. If you don\&'t own the IP you are using, you may need to turn | routing to the IP\&. If you don\(cq\&t own the IP you are using, you may need to turn |
on promiscious mode on the interface (with -p)\&. With this switch you can find | on promiscious mode on the interface (with \-p)\&. With this switch you can find |
out what IP-address a host has without taking an IP-address yourself\&. | out what IP\-address a host has without taking an IP\-address yourself\&. |
.IP "-t \fIMAC\fP" | .IP "\-t \fIMAC\fP" |
Set target MAC address to use when pinging IP address\&. |
Set target MAC address to use when pinging IP address\&. |
.IP "-T \fIIP\fP" | .IP "\-T \fIIP\fP" |
Use -T as target address when pinging MACs that won\&'t | Use \-T as target address when pinging MACs that won\(cq\&t |
respond to a broadcast ping but perhaps to a directed broadcast\&. |
respond to a broadcast ping but perhaps to a directed broadcast\&. |
.IP |
.IP |
\fIExample\fP: To check the address of MAC-A, use knowledge of MAC-B and IP-B\&. | \fIExample\fP: |
| .nf |
| .sp |
| To check the address of MAC\-A, use knowledge of MAC\-B and IP\-B\&. |
.IP |
.IP |
$ arping -S <IP-B> -s <MAC-B> -p <MAC-A> | $ arping \-S <IP\-B> \-s <MAC\-B> \-p <MAC\-A> |
.IP "-u" | .IP "\-u" |
Show index=received/sent instead of just index=received when |
Show index=received/sent instead of just index=received when |
pinging MACs\&. |
pinging MACs\&. |
.IP "-v" | .IP "\-U" |
| Send unsolicited ARP\&. This sets the destination MAC address in |
| the ARP frame to the broadcast address\&. Unsolicited ARP is used |
| to update the neighbours\(cq\& ARP caches\&. |
| .IP |
| \fIExample\fP: |
| .nf |
| .sp |
| $ arping \-i <interface> \-U <interface IP> |
| .IP "\-v" |
Verbose output\&. Use twice for more messages\&. |
Verbose output\&. Use twice for more messages\&. |
.IP "-w" | .IP "\-w" |
Time to wait between pings, in microseconds\&. |
Time to wait between pings, in microseconds\&. |
|
|
.PP |
.PP |
.SH "EXAMPLES" |
.SH "EXAMPLES" |
.nf |
.nf |
.sp |
.sp |
# \fBarping -c 3 88\&.123\&.180\&.225\fP | # \fBarping \-c 3 88\&.1\&.180\&.225\fP |
ARPING 88\&.123\&.180\&.225 | ARPING 88\&.1\&.180\&.225 |
60 bytes from 00:11:85:4c:01:01 (88\&.123\&.180\&.225): index=0 time=13\&.910 msec | 60 bytes from 00:11:85:4c:01:01 (88\&.1\&.180\&.225): index=0 time=13\&.910 msec |
60 bytes from 00:11:85:4c:01:01 (88\&.123\&.180\&.225): index=1 time=13\&.935 msec | 60 bytes from 00:11:85:4c:01:01 (88\&.1\&.180\&.225): index=1 time=13\&.935 msec |
60 bytes from 00:11:85:4c:01:01 (88\&.123\&.180\&.225): index=2 time=13\&.944 msec | 60 bytes from 00:11:85:4c:01:01 (88\&.1\&.180\&.225): index=2 time=13\&.944 msec |
.PP |
.PP |
--- 88\&.123\&.180\&.225 statistics --- | \-\-\- 88\&.1\&.180\&.225 statistics \-\-\- |
3 packets transmitted, 3 packets received, 0% unanswered |
3 packets transmitted, 3 packets received, 0% unanswered |
.PP |
.PP |
# \fBarping -c 3 00:11:85:4c:01:01\fP | # \fBarping \-c 3 00:11:85:4c:01:01\fP |
ARPING 00:11:85:4c:01:01 |
ARPING 00:11:85:4c:01:01 |
60 bytes from 88\&.123\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=0 time=13\&.367 msec | 60 bytes from 88\&.1\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=0 time=13\&.367 msec |
60 bytes from 88\&.123\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=1 time=13\&.929 msec | 60 bytes from 88\&.1\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=1 time=13\&.929 msec |
60 bytes from 88\&.123\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=2 time=13\&.929 msec | 60 bytes from 88\&.1\&.180\&.225 (00:11:85:4c:01:01): icmp_seq=2 time=13\&.929 msec |
.PP |
.PP |
--- 00:11:85:4c:01:01 statistics --- | \-\-\- 00:11:85:4c:01:01 statistics \-\-\- |
3 packets transmitted, 3 packets received, 0% unanswered |
3 packets transmitted, 3 packets received, 0% unanswered |
.PP |
.PP |
.fi |
.fi |
Line 137 ARPING 00:11:85:4c:01:01
|
Line 149 ARPING 00:11:85:4c:01:01
|
.SH "BUGS" |
.SH "BUGS" |
|
|
.PP |
.PP |
You have to use -B instead of arpinging 255\&.255\&.255\&.255, and -b | You have to use \-B instead of arpinging 255\&.255\&.255\&.255, and \-b |
instead of -S 255\&.255\&.255\&.255\&. This is libnets fault\&. | instead of \-S 255\&.255\&.255\&.255\&. This is libnets fault\&. |
.PP |
.PP |
.SH "SEE ALSO" |
.SH "SEE ALSO" |
|
|
Line 148 instead of -S 255\&.255\&.255\&.255\&. This is libnets
|
Line 160 instead of -S 255\&.255\&.255\&.255\&. This is libnets
|
.SH "AUTHOR" |
.SH "AUTHOR" |
|
|
.PP |
.PP |
Arping was written by Thomas Habets <thomas@habets\&.pp\&.se>\&. | Arping was written by Thomas Habets <thomas@habets\&.se>\&. |
.PP |
.PP |
http://www\&.habets\&.pp\&.se/synscan/ |
http://www\&.habets\&.pp\&.se/synscan/ |
.PP |
.PP |