arp-scan

Arp-scan is a powerful software that enables users to send ARP queries to targets and displays any received responses. With this software, it is possible to change any component of the outgoing ARP packets, giving users the ability to examine non-standard ARP packet targets' behaviors. The software provides a display of both IP and hardware addresses of received packets, with the vendor details, including those obtained from IEEE OUI and IAB listings, and a few manual entries.

Additionally, arp-scan includes arp-fingerprint, which allows users to fingerprint a system based on its response to non-standard ARP packets. The software is continually being improved and updated, with some of the notable new features in the latest version including the ability to save ARP response packets to a pcap file for later analysis using the --pcapsavefile option.

The software also has a new --vlan option that enables users to create outgoing ARP packets with an 802.1Q VLAN tag, as well as a new --llc option for creating outgoing ARP packets with RFC 1042 LLC/SNAP framing. Users also get new ARP fingerprints, while the IEEE OUI and IAB files that the software relies on have been updated to ensure the most up-to-date information. Overall, arp-scan is highly recommended for anyone looking to analyze and examine ARP behavior.