phpipam / phpipam

phpipam development repository
https://phpipam.net
2.2k stars 732 forks source link

Discovery and Host Scan Process #3776

Open Grunticus03 opened 1 year ago

Grunticus03 commented 1 year ago

Request for help using phpIPAM / Misc question? I am trying to understand what the process should be for scanning for hosts. If I use a ping scan for discovery, the MAC addresses are not resolved. If I run a SNMP ARP scan, not all the devices out there are discovered. I have implemented the pingCheck, discoveryCheck, and resolveIPaddresses scripts in crontab and they seem to be functioning properly.

Another thing I don't quite understand, I've defined my network devices in the Devices page. A couple layer 3 switches, two wireless access points, and a router. When doing an SNMP ARP scan, all the devices on one subnet are assigned to the router and on another subnet, to a wireless access point. I assumed the assigned device is what that endpoint is directly connected to. However, I have one subnet whose VLAN terminates on a L3 switch and never goes to the router, but these devices are assigned to the router. Additionally, I have a couple hosts that are wired directly into another switch, but are assigned to a wireless access point. Am I incorrectly assuming how this is supposed to work?

Westy-87 commented 2 months ago

The thing I don't understand is why it sends arp request to every single device I have defined in my system, not just the one assigned to the subnet I am scanning. It adds so much time to the requests. We have 50 sites that all have a core switch/router. I have that device assigned as the arp device for each site's subnets. But arp scanning a subnet shows it sent the request to every device.