jeremyandrews / netgrasp

Passive network observation tool
Other
31 stars 1 forks source link

improve device identification #14

Open jeremyandrews opened 7 years ago

jeremyandrews commented 7 years ago

Currently Netgrasp has three levels of detection:

  1. The vendor associated with the MAC address
  2. The hostname of the IP associated with the MAC address
  3. A manually assigned custom name

Existing network scanning software can often find considerably more useful information about devices on the network. This ticket is to implement this functionality into Netgrasp.

jeremyandrews commented 7 years ago

nmap offers some useful OS detection:

jeremyandrews commented 7 years ago

we can also sniff and analyze dhcp packets, adding to the information we already get from arp packets: