Script `broadcast-igmp-discovery`

Script types: prerule
Categories: discovery, safe, broadcast
Download: https://svn.nmap.org/nmap/scripts/broadcast-igmp-discovery.nse

Script Summary

Discovers targets that have IGMP Multicast memberships and grabs interesting information.

The scripts works by sending IGMP Membership Query message to the 224.0.0.1 All Hosts multicast address and listening for IGMP Membership Report messages. The script then extracts all the interesting information from the report messages such as the version, group, mode, source addresses (depending on the version).

The script defaults to sending an IGMPv2 Query but this could be changed to another version (version 1 or 3) or to sending queries of all three version. If no interface was specified as a script argument or with the -e option, the script will proceed to sending queries through all the valid ethernet interfaces.

Script Arguments

broadcast-igmp-discovery.mgroupnamesdb: Database with multicast group names
broadcast-igmp-discovery.version: IGMP version to use. Could be 1, 2, 3 or all. Defaults to 2
broadcast-igmp-discovery.timeout: Time to wait for reports in seconds. Defaults to 5 seconds.
broadcast-igmp-discovery.interface: Network interface to use.
max-newtargets, newtargets: See the documentation for the target library.

Example Usage

nmap --script broadcast-igmp-discovery
nmap --script broadcast-igmp-discovery -e wlan0
nmap --script broadcast-igmp-discovery
--script-args 'broadcast-igmp-discovery.version=all, broadcast-igmp-discovery.timeout=3'

Script Output

Pre-scan script results:
| broadcast-igmp-discovery:
|   192.168.2.2
|     Interface: tap0
|     Version: 3
|     Group: 239.1.1.1
|       Mode: EXCLUDE
|       Description: Organization-Local Scope (rfc2365)
|     Group: 239.1.1.2
|       Mode: EXCLUDE
|       Description: Organization-Local Scope (rfc2365)
|     Group: 239.1.1.44
|       Mode: INCLUDE
|       Description: Organization-Local Scope (rfc2365)
|       Sources:
|           192.168.31.1
|   192.168.1.3
|     Interface: wlan0
|     Version: 2
|     Group: 239.255.255.250
|     Description: Organization-Local Scope (rfc2365)
|   192.168.1.3
|     Interface: wlan0
|     Version: 2
|     Group: 239.255.255.253
|     Description: Organization-Local Scope (rfc2365)
|_  Use the newtargets script-arg to add the results as targets

Requires

Author:

Hani Benhabiles