1. Host Discovery

These exercises are as per the modules. better tools are

• arpscan

• netdiscover

Netdiscover

netdiscover -i (network interface name) (example: eth0 or tun0)
netdiscover -i eth0
netdiscover -r 10.10.10.0/24

1. Host discovery using nmap

nmap -sn -PR 192.168.18.110

-sn disables port scan

-PR arp scan. sends ARP probes

sudo nmap -sn -PU 192.168.18.110   //UDP ping scan

nmap -sn -PE 192.168.18.1-255   //ICMP Echo scan
nmap -sn -PM 192.168.18.1-255    //Mask Ping scan (use if ICMP is blocked)
nmap -sn -PP 192.168.18.1-255    //ICMP timestamp scan
nmap -sn -PS 192.168.18.1-255    //tcp syn ping scan
nmap -sn -PO 192.168.18.1-255     //IP protocol scan.use different protocols to test the connectivity

2. Angry IP Scanner

change in settings to change pinging method to UDP+TCP. In display tab, change to display only live hosts.