Netdiscover – Network Address Discovery Tool

Usage: ./netdiscover [i device] [r range | p] [s time] [n node] [c count] [f] [S]

  i device

    The network device to sniff at and inject packets. If no device was

    specified, first available will be used.

  r range

    Scan a given range instead of auto scan. Valid range values are:, or


    Enable passive mode do not send anything, only sniff

  s time

    It will sleep given time in milliseconds between each arp request

    injection. (default 1)

  c count

    Number of times to send each arp reques. Usefull for networks with

    packet loss, so it will scan given times for each host.

  n node

    Last ip octet used for scanning as source host, you can change it

    if the default host is already used (from 2 to 253) (default 66)


    Enable sleep time supression betwen each request. I will sleep each 255

    scanned hosts instead of do it by each one, this mode was used on 0.3 beta4

    and older releases. Avoid this option on networks with packet lossing,

    or in wireless networks with low signal level. (also called hardcore mode)


    Enable fastmode scan, it will only scan for hosts .1, .100, .254 on each

    network, usefull when searching for addresses being used, after find one

    you can make a specific range scan to see online boxes.

    Scanned hosts can be easily modified at fast_ips[] array on main.c source.

If p or r options are not used, netdiscover will automatically scan for common

lan addresses. Those address lists can be modified at common_net[] on main.c

Leave a Reply