I have been playing with libpcap/jpcap. Implementing a arp sweeper. I send a request for all ip's in the block to the broadcast address and read replies. Now i can't think of a way to exit from the listening function. Now i wait 2 secs and assume ever client responded but this just seems dirty. Can anyone recommend a logic to determine if the scan is complete?
+1
A:
If it's taking more than 2 seconds then there is something very wrong with the network. This tool defaults at 250 ms: http://linux-ip.net/sw/arpsweep/arpsweep.8.html
lod3n
2009-09-25 04:49:32