Icmpenum

Icmpenum is a handy tool that sends ICMP traffic to find potential targets on a network. It helps with something called host enumeration, which is just a fancy way of saying figuring out the IP addresses of devices connected to the network. You can do this in both layer 2 and layer 3, and that's where Icmpenum comes in. It supports different types of ICMP packets like Echo, Timestamp, Information, and Netmask. Plus, it can spoof addresses and listen for replies!

Setting Up Icmpenum

If you want to get started with Icmpenum, here’s how:

1. First, grab the latest version of libpcap (you can find it at ftp://ftp.ee.lbl.gov/libpcap.tar.Z).


2. Next, download the latest version of Libnet from http://www.packetfactory.net/libnet/.


3. Now it's time to compile Icmpenum! Run this command:
   

   gcc `libnet-config --defines` -o icmpenum icmpenum.c -lnet -lpcap

   
   


4. Finally, copy icmpenum to your favorite directory and start enumerating as root!

How to Use Icmpenum

If you need help using it, just run:

# ./icmpenum -h

This will show you how to use the tool with various options:

• -h: this help screen


• -n: no sending of packets


• -p: promiscuous receive mode


• -r: receiving packets only (no sending)


• -v: verbose mode for more details


• -c class C in x.x.x.0 format (for target hosts)


• -i: choose an ICMP type (like echo or timestamp)


• -d: device for grabbing local IP (default is eth0)


• -s: spoofed source address


• -t: wait time in seconds for replies (default is 5)

Examples of Using Icmpenum

Here are some examples showing how powerful Icmpenum can be:

Example 1:

[Host1]# icmpenum 192.168.1.1 192.168.1.2

This checks if both IPs are online using default Echo packets.

Example 2:

[Host1]# icmpenum -i 2 -v 192.168.100.100 192.168.100.200

This uses Timestamp packets in verbose mode.

Example 3:

[Host1]# icmpenum -i 3 -s 10.10.10.10 -p -v 192.168.1.1 192.168.1.2

This uses Information packets with a spoofed address.

More Advanced Uses of Icmpenum:

You can also do more