On Tue, 6 Nov 2012, Chris Green wrote:
Not when my hosts are assigned their IP addresses by a local DHCP server:-
root@chris:/etc/init.d# arp-scan -l Interface: eth0, datalink type: EN10MB (Ethernet) Starting arp-scan 1.8.1 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/) 192.168.1.1 00:50:7f:8b:35:40 DrayTek Corp. 192.168.1.2 00:01:6c:6c:c7:9b FOXCONN 192.168.1.6 00:04:4b:07:13:30 NVIDIA 192.168.1.90 00:90:a9:70:06:ff WESTERN DIGITAL 192.168.1.113 50:fa:ab:00:51:8b L-tek d.o.o. 192.168.1.122 78:ac:c0:63:90:d4 Hewlett Packard 192.168.1.128 b8:27:eb:22:d7:92 (Unknown) 192.168.1.81 00:01:e3:9d:8b:b5 Siemens AG 192.168.1.140 00:23:8b:de:b6:d9 Quanta Computer Inc. 192.168.1.150 00:04:20:26:55:19 Slim Devices, Inc.
Could you pipe this arp-scan -l output to something like this Perl script...?
#!/usr/bin/perl
my $line ; my @words ;
while ($line = <STDIN>) {
@words = split(/\s+/,$line) ;
if ($words[1] =~ /\d+.\d+.\d+.\d+/) { system("dig -x " . $words[1]) ; }
}