abrander / pnmap

Passive Network Mapper - like nmap, but passive

pnmap

Passive Network Mapper is an entirely passive network mapper. It will passively and undetectable gather information about hosts and clients participating in an ethernet segment.

Features

• Undetectable by network participants
• Does not require promiscuous mode
• Supports wired and wireless networks
• Supports encrypted WiFi-networks
• Detects IPv4 addresses of hosts
• Detects IPv6 addresses of hosts
• Detects IPv6 neighbor discovery
• Detects IPv4 and IPv6 DHCP client vendor, hostnames and IPs
• Detects DHCP servers
• Detects public IPv4 address of natted network
• Detects DHCP hostnames
• Detects DHCP vendors
• Detects Mikrotek routers
• Detects SSDP user agents
• Detects Chrome OS
• Detects clients running Spotify and Spotify Connect speakers
• Detects Sonos speakers
• Detects Dropbox clients
• Detects HASP License Managers
• Detects MDNS services
• Detects macOS SSH servers
• Detects iOS and macOS hardware models
• Detects Chromecast and AirPlay clients and servers
• Detects various file-sharing services
• Detects Glen Dimplex Nobø Energy Control hubs
• Detects WS-Discovery clients
• Detects Ubiquiti Discover clients
• Detects TeamViewer
• Detects Mediaroom displays
• Detects Minecraft clients
• Detects Steam
• Detects VNC
• Detects NetBIOS (basic)
• Displays ethernet OUI vendors
• no cgo needed.

Requirements

A working Go environment is required for compiling, and a Linux, BSD or macOS host is required for running.

Compiling

The usual go mod download, go generate and go build should suffice.

Running

List network interfaces by invoking ./pnmap list.

Monitoring a live network can be done like ./pnmap monitor -i eno1.

Replaying a pcap file: ./pnmap simulate capture-file.pcap.