find a record for the same host and merges the info. If the host can't be found, then it adds a new record for the host.

json response from www.macvendorlookup.com: {u'addressL1': u'1 Infinite Loop', u'addressL2': u'', u'addressL3': u'Cu

lots to do

This function accepts a 12 hex digit string and converts it to a colon separated string

Has the file changed? return True - file has changed False - the file is still the same

decode an ethernet packet. The dict returned indicates the type (arp,mdns,etc) which will indicate how to read/use the dict. https://support.a

The output from pcap is just a list of records, this condenses/combines the info into a network mapping.

Need to get the localhost IP address in: none out: returns the host machine's IP address

Major flaw of NMAP doesn't allow you to get the localhost's MAC address, so this is a work around. in: none out: string of hex for MAC addres

The response records (rr) in a dns packet all refer to the same host

opens a pcap file and reads the contents

Processes each packet from pcap

brew install arp-scan arp-scan -l -I en1 -l use local networking info -I use a specific interface return {mac: mac_addr, ipv4: ip_addr}

arpscan - {'mac': mac,'ipv4': ip} in: device for arp-scan to use (ie. en1) out: [host1,host2,...] where host is: { 'mac': '34:62:98:03:

Given a valid ipv4 address, it returns the whois info as a namedtuple: whois('172.217.12.4') HostInfo(cidr=u'172.217.0.0/16', netname=u'

Everything is done in init(), don't call any methods, just access ip or mac.

Use the avahi (zeroconfig) tools or dig to find a host name given an ip address. in: ip out: string w/ host name or 'unknown'

watch_file - what file to watch

Use the avahi (zeroconfig) tools or dig to find a host name given an ip address. in: ip out: string w/ host name or 'unknown' if the

open device Arguments here are: device snaplen (maximum number of bytes to capture _per_packet_) promiscious mode (1 for true), need Fal

For our scanner, we are looking for a type value of 3 and a code value of 3, which are the Destination Unreachable class and Port Unreachable err

This won't work on travis.ci