The simple way of scanning is sending ICMP requests (ping) to every IP address in the subnet and collecting data from those who send back the echo reply. In that case you will need to resort to actively scanning the network subnet which is not 100% accurate and depending on how the network is implemented can be considered as a possible attack.
In practice there is 99% chance that the network adapter driver will allow you only to get traffic destined for your MAC address. This is something that is commonly referred to as a promiscuous mode. Theoretically, since wifi uses shared medium for communication, you can passively listen for traffic flowing through the network and collect data about client without sending any packets. Because those are mobile devices I will assume you want to find devices on a wireless network.
0 kommentar(er)
