Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
catch a whiff of these mac addresses
Ruby Shell
Branch: master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
lib
spec
.gitignore
.rspec
.travis.yml
CHANGES.md
Gemfile
Gemfile.lock
LICENSE.txt
README.md
Rakefile
whiff.gemspec

README.md

whiff

catch a whiff of this.

an interface to sniffing MAC addresses on the local network through arp-scan.

Build Status

Getting Started

installing arp-scan

mac os x:

  1. brew update
  2. brew install arp-scan

linux:

  1. sudo apt-get update
  2. sudo apt-get intall arp-scan

arp-scan usage

on mac os x, try:

sudo arp-scan -l -s 10.0.1.1 -I en1 -q

where 10.0.1.1 is the IP address of your router, and en1 is the name of your active network interface.

on linux, try:

sudo arp-scan -l -s 10.0.1.1 -I wlan0 -q

where 10.0.1.1 is the IP address of your router, and wlan0 is the name of your active network interface.

either of these should return something similar to the following:

    Interface: en1, datalink type: EN10MB (Ethernet)
    Starting arp-scan 1.8 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
    10.0.1.29   00:13:21:c1:28:9a
    10.0.1.4    20:c9:d0:b5:61:21
    10.0.1.3    8c:3a:e3:98:81:2d
    10.0.1.8    94:94:26:95:09:f0
    10.0.1.2    00:00:48:64:11:ef
    10.0.1.200  b8:27:eb:13:65:e7

    537 packets received by filter, 0 packets dropped by kernel
    Ending arp-scan 1.8: 256 hosts scanned in 1.171 seconds (218.62 hosts/sec). 6 responded

whiff usage

sudo irb -r whiff

Whiff::ArpScan.fetch('10.0.1.1', 'en1', verbose: true)

results in:

    00:13:21:c1:28:9a
    20:c9:d0:b5:61:21
    8c:3a:e3:98:81:2d
    94:94:26:95:09:f0
    00:00:48:64:11:ef
    b8:27:eb:13:65:e7
Something went wrong with that request. Please try again.