list all hosts and ips with in subnet
 

Hi all,

I wanted to list all hosts that are in network for ex: (192.168.100.24/24). I tried using nmap scan but it only lists the hosts which are up.Can we somehow lists all the hosts that are up and down.

I used the below

no, how do you think that? If the host is down it is not connected to anywhere, does not belong to any network.
Do you think if I bring 20 RPi's into the room they should be listed as well?

Ofocurse not, atleast I wanted to lists all the hosts available with in the network. Any other tool that we can use

192.168.0.1 all the way through to 192.168.100.254 are available.

Go back to your firewall logs and look for any traffic within that address space. Of course that won't list any internal traffic.

Use your body to go turn on all the hosts and then do a ping scan. Of course that only works if ICMP isn't blocked by the host at firewall level.

Compare the output of nmap, ping sweeps, etc. with your reference list of known authorized assets and see which are missing.

Unfortunately dont have access to firewall logs, I meant hosts available means ( Ipaddress is registered and dns configured ).

Again, you cannot collect any information about hosts which are unavailable, down. Cannot read their configuration. They may or may not connect to the network. Also you may change DHCP, firewall, ... to enable/disable their access to that network.

That is correct operation. There is no way a program can 'know' which devices are not on the network (device network down, kernel faulted, or powered off). Just not doable. Like holding an un-powered RPI in your hand and expecting the network that it is there in the room. Not going to find it!

Only way i know is to get an initial list of all the devices that are on the network and then when you run nmap, you can compare that list against the known list. Normally though you should have a good idea what is not on the network because whatever its function is is no longer available which points you to the device.

Look in your DNS server ...

Thanks for the suggestions.

DNS is not list-able, so
won't work with DNS.
But you can try the bash command

:)
Applicable at windows also(output at my localhost)

You might use a network monitoring application running in a host on a span port and building historical data about any node that comes up on your subnet. It will ONLY detect nodes that have been turned on and on the subnet DURING ITS RUN-TIMES, so you will get a list going forward but no backward historical data.

I have used NAGIOS and ZABBIX in enterprise environments, but I suspect for a small network something smaller should serve better. Something based upon ipscanner, nmap, or other application level tools might be leveraged here.