Search code examples
wiresharkarpnmap

Nmap scan different (?) subnet (ARP request)


Well met!

I have two machines and a switch, one machine has the address "192.168.233.1" the other has "192.168.1.1". How could I scan, using nmap, the range 192.168.1.1-254 from the 233.1 machine? I want to be able to see only the requests to 192.168.1.1 in Wireshark.

Thanks!


Solution

  • The hosts must be interconnected by a gateway (assuming their subnet mask is a /24).

    If the gateway exists, the two subnet can reach each other and you can use nmap normally (e.g. nmap -sP 192.168.1.1-254)

    Then if you wanna see only traffic toward the host 192.168.1.1, put ip.addr == 192.168.1.1 as filter on wireshark