Categories: discovery, safe, broadcast
Discovers targets that have IGMP Multicast memberships and grabs interesting information.
The scripts works by sending IGMP Membership Query message to the 126.96.36.199 All Hosts multicast address and listening for IGMP Membership Report messages. The script then extracts all the interesting information from the report messages such as the version, group, mode, source addresses (depending on the version).
The script defaults to sending an IGMPv2 Query but this could be changed to another version (version 1 or 3) or to sending queries of all three version. If no interface was specified as a script argument or with the -e option, the script will proceed to sending queries through all the valid ethernet interfaces.
Database with multicast group names
IGMP version to use. Could be
all. Defaults to
Time to wait for reports in seconds.
Network interface to use.
max-newtargets, newtargetsSee the documentation for the target library.
nmap --script broadcast-igmp-discovery nmap --script broadcast-igmp-discovery -e wlan0 nmap --script broadcast-igmp-discovery --script-args 'broadcast-igmp-discovery.version=all, broadcast-igmp-discovery.timeout=3'
Pre-scan script results: | broadcast-igmp-discovery: | 192.168.2.2 | Interface: tap0 | Version: 3 | Group: 188.8.131.52 | Mode: EXCLUDE | Description: Organization-Local Scope (rfc2365) | Group: 184.108.40.206 | Mode: EXCLUDE | Description: Organization-Local Scope (rfc2365) | Group: 220.127.116.11 | Mode: INCLUDE | Description: Organization-Local Scope (rfc2365) | Sources: | 192.168.31.1 | 192.168.1.3 | Interface: wlan0 | Version: 2 | Group: 18.104.22.168 | Description: Organization-Local Scope (rfc2365) | 192.168.1.3 | Interface: wlan0 | Version: 2 | Group: 22.214.171.124 | Description: Organization-Local Scope (rfc2365) |_ Use the newtargets script-arg to add the results as targets
Author: Hani Benhabiles
License: Same as Nmap--See http://nmap.org/book/man-legal.html