Skip to main content

Fing CLI Network Scanner on Arch Linux

Shenzhen, China

Installation

There are installer available for Windows, macOS and Debian (deb)/RHEL(rpm) Linux and the installation there should be straight forward. On Arch I will use the Linux Generic download:

wget https://www.fing.com/images/uploads/general/CLI_Linux_Generic_5.5.2.zip
unzip CLI_Linux_Generic_5.5.2.zip

In case of Debian and RHEL you can directly install the deb or rpm package:

sudo dpkg -i fing-5.5.2-amd64.deb
sudo rpm -i fing-5.5.2-amd64.rpm

For the Linux Generic build we have to un-tar the package and copy all files to the place they belong - this can be done with the following command:

sudo tar -zxvf fing-5.5.2-amd64.tar.gz --strip-components 1 -C /

More Installation Options can be found here.

Verify that the installation worked as expected:

sudo fing -v
5.5.2

Configuration

All configuration files can be found in /etc/fing.

Fing Hosts Properties

sudo nano /etc/fing/hosts.properties

192.168.178.0/24 = INSTAR Office

192.168.178.1 = Primary Gateway
192.168.178.5 = Secondary Gateway

192.168.178.110 = RHEL8 Workstation
192.168.178.111 = Debian Bullseye
192.168.178.112 = Manjaro Workstation
192.168.178.117 = MP-8015 White

Fing Discovery Properties

sudo nano discovery.properties

# Network Discovery configuration - Copyright 2009 by Overlook
# $Id$
#

# default profile
profile.default=Default discovery profile

# native (data-link) discovery configuration for default profile
profile.default.data-link.round.interval = 60000
profile.default.data-link.packet.interval = 20
profile.default.data-link.timeout = 1500
profile.default.data-link.retries = 3

# network discovery configuration for default profile
profile.default.network.round.interval = 300000
profile.default.network.packet.interval = 5
profile.default.network.discovery.icmp = true
profile.default.network.discovery.tcp = true
profile.default.network.timeout.icmp = 2000
profile.default.network.timeout.tcp = 2000
profile.default.network.retries.icmp = 2
profile.default.network.retries.tcp = 2
profile.default.network.discovery.tcp.services = 80;135;139;143;21;22;23;25;443;445;53;8080;110;3306;3389

Fing Fing Properties

sudo nano /etc/fing/fing.properties

#
# Fing system properties - Copyright 2008-2009 by Overlook
# $Id$
#

#
# log configuration
#
overlook.fing.logging.enabled = false
overlook.fing.logging.level = INFO


#
# Discovery configuration and defaults
#
overlook.fing.netdiscovery.network.default =
overlook.fing.netdiscovery.output.default = log,text table,stext
overlook.fing.netdiscovery.rounds.default = 0
overlook.fing.netdiscovery.profile.default = default
overlook.fing.netdiscovery.shownProgressStep = 25
overlook.fing.netdiscovery.eventlog.maxsize = 100
overlook.fing.netdiscovery.eventlog.maxdays = 365
overlook.fing.netdiscovery.dnslookup.refresh = 1800000


#
# Date and time format configuration (all, month, day, time)
#
overlook.fing.DateTimeFormat.format = time


#
# Reverse DNS Lookup feature
#
overlook.fing.ReverseDnsLookup.enabled = true

#
# CSV separator configuration
#
overlook.fing.formatter.csv.separator = ;

#
# TCP service scan configuration: tcp syn and connect scan
#

# TCP syn scan configuration
overlook.net.scan.TcpSynScanner.retries = 2
overlook.net.scan.TcpSynScanner.timeout = 2000
overlook.net.scan.TcpSynScanner.packet.interval = 2

# TCP connect scan configuration
overlook.net.scan.TcpConnectScanner.threadpool.corePoolSize = 10
overlook.net.scan.TcpConnectScanner.threadpool.maxPoolSize = 50

#
# ICMP ping configuration
#
overlook.fing.Ping.retries = 5
overlook.fing.Ping.timeout = 1500
overlook.fing.Ping.packet.interval = 150
overlook.fing.Ping.packet.size = 32


#
# HTTP proxy configuration
# At the moment the only supported proxy is HTTP, to enable it set:
# overlook.net.http.proxy = http
#
overlook.net.http.proxy = none
overlook.net.http.proxy.http.host = your-proxy-host-here
overlook.net.http.proxy.http.port = your-proxy-port-here

#
# HTTP Basic auth is supported, if needed by the proxy, to enable it set auth=true and fill in account
#
overlook.net.http.proxy.http.auth = false
overlook.net.http.proxy.http.user = your-proxy-user-here
overlook.net.http.proxy.http.pass = your-proxy-pass-here

Fing IP-Services Properties

sudo nano ip-services.properties

udp.80=http ; World Wide Web HTTP ; scan
udp.800=mdbs_daemon ; ; scan
udp.801=device ; ; scan
udp.81=hosts2-ns ; HOSTS2 Name Server ; scan
udp.82=xfer ; XFER Utility ; scan
udp.83=mit-ml-dev ; MIT ML Device ; scan
udp.84=ctf ; Common Trace Facility ; scan
udp.85=mit-ml-dev ; MIT ML Device ; scan
udp.86=mfcobol ; Micro Focus Cobol ; scan
udp.88=kerberos-sec ; Kerberos (v5) ; scan

...

Run a Network Scan

Info

sudo fing -i

Local network interfaces:
enp3s0:
Type: Ethernet
Hardware address: 1C:1B:0D:C5:81:7F
Vendor: Giga-Byte Technology
IP address: 192.168.178.112/24 [192.168.178.255]
IP address: 240E:03B5:3012:5260:66DB:B3CF:A9E3:384E/128
IP address: FD00:0000:0000:0000:DC97:4573:6246:8872/128
IP address: FE80:0000:0000:0000:F5F7:2320:89B5:C3C6/128

docker0:
Type: Ethernet
Hardware address: 02:42:24:AC:C8:2F
IP address: 172.17.0.1/16 [172.17.255.255]

tun0:
Type: Raw IP
IP address: 198.18.9.120/21
IP address: FE80:0000:0000:0000:43A6:AAD3:BD26:0CD5/128

Remote networks:
0.0.0.0/1 via 198.18.8.1
91.207.174.101/32 via 192.168.178.1
128.0.0.0/1 via 198.18.8.1

Default gateway:
192.168.178.1

DNS Servers:
198.18.8.1

Discovery

sudo fing -n 192.168.178.0/24


12:51:50 > Discovery profile: Default discovery profile
12:51:50 > Discovery class: data-link (data-link layer)
12:51:50 > Discovery on: INSTAR Office (192.168.178.0/24)

12:51:50 > Discovery round starting.
12:51:50 > Host is up: Manjaro Workstation (192.168.178.112)
HW Address: 1C:1B:0D:C5:81:7F (Giga-Byte Technology)
Hostname: TP-Link0815b

12:51:51 > Host is up: Primary Gateway (192.168.178.1)
HW Address: 44:4E:6D:7A:1C:BB
Hostname: _gateway

12:51:51 > Host is up: Secondary Gateway (192.168.178.5)
HW Address: 44:4E:6D:79:AC:13

12:51:55 > Discovery progress 25%

12:51:51 > Host is up: 192.168.178.59
HW Address: 10:D1:DC:22:78:39 (INSTAR Deutschland)

12:51:51 > Host is up: 192.168.178.50
HW Address: 10:D1:DC:22:56:87 (INSTAR Deutschland)

12:51:52 > Host is up: 192.168.178.52
HW Address: 10:D1:DC:1F:46:35 (INSTAR Deutschland)

12:51:52 > Host is up: 192.168.178.64
HW Address: 10:D1:DC:22:78:20 (INSTAR Deutschland)

12:51:52 > Host is up: 192.168.178.67
HW Address: 10:D1:DC:1E:95:34 (INSTAR Deutschland)

12:51:53 > Host is up: RHEL8 Workstation (192.168.178.110)
HW Address: 74:D4:35:C7:C2:20 (Giga-Byte Technology)

12:51:53 > Host is up: MP-8015 White (192.168.178.117)
HW Address: 10:D1:DC:21:8F:96 (INSTAR Deutschland)

12:52:03 > Discovery progress 75%
-------------------------------------------------------------------------------
| State | Host | MAC Address | Last change |
|-----------------------------------------------------------------------------|
| UP | 192.168.178.1 | 44:4E:6D:7A:1C:BB | |
| UP | 192.168.178.5 | 44:4E:6D:79:AC:13 | |
| UP | 192.168.178.50 | 10:D1:DC:22:56:87 | |
| UP | 192.168.178.52 | 10:D1:DC:1F:46:35 | |
| UP | 192.168.178.59 | 10:D1:DC:22:78:39 | |
| UP | 192.168.178.64 | 10:D1:DC:22:78:20 | |
| UP | 192.168.178.67 | 10:D1:DC:1E:95:34 | |
| UP | 192.168.178.110 | 74:D4:35:C7:C2:20 | |
| UP | 192.168.178.112 | 1C:1B:0D:C5:81:7F | |
| UP | 192.168.178.117 | 10:D1:DC:21:8F:96 | |
-------------------------------------------------------------------------------

12:52:07 > Discovery round completed in 16.504 seconds.
12:52:07 > Network INSTAR Office has 10/10 hosts up.

Services

sudo fing -s 192.168.178.117

12:57:44 > Service scan on: MP-8015 White (192.168.178.117)

12:57:44 > Service scan starting.
12:57:44 > Detected MAC address: 10:D1:DC:21:8F:96
12:57:44 > Detected service: 443 (https)
12:57:44 > Detected service: 80 (http)
12:57:44 > Detected service: 22 (ssh)
12:57:44 > Detected service: 8080 (http-proxy)
12:57:44 > Detected service: 1935 (rtmp)
12:57:45 > Detected service: 554 (rtsp)
12:57:45 > Service scan completed in 0.985 seconds.

-------------------------------------------------------------------------------
| Scan result for MP-8015 White (192.168.178.117 10:D1:DC:21:8F:96) |
|-----------------------------------------------------------------------------|
| Port | Service | Description |
|-----------------------------------------------------------------------------|
| 22 | ssh | SSH Secure Shell |
| 80 | http | World Wide Web HTTP |
| 443 | https | Secure World Wide Web HTTP (SSL) |
| 554 | rtsp | Real Time Stream Control Protocol |
| 1935 | rtmp | Macromedia FlasComm Server |
| 8080 | http-proxy | Common HTTP proxy/second web server port |
-------------------------------------------------------------------------------

Ping

sudo fing -p 192.168.178.117

12:58:59 > Ping reply from MP-8015 White in 0 ms
12:58:59 > Ping reply from MP-8015 White in 1 ms
12:58:59 > Ping reply from MP-8015 White in 1 ms
12:58:59 > Ping reply from MP-8015 White in 0 ms
12:58:59 > Ping reply from MP-8015 White in 0 ms

-------------------------------------------------
| === Fing 5.5.2 - www.fing.io === |
|-----------------------------------------------|
| host | avg | loss | min | max |
|-----------------------------------------------|
| MP-8015 White | 0 | - | 0 | 1 |
-------------------------------------------------

Traceroute

sudo fing -T 192.168.178.110

2022/04/04 13:00:39 > Selected network interface: enp3s0
traceroute to RHEL8 Workstation (192.168.178.110), 30 hops max, 52 byte packtes

1> 192.168.178.110 (192.168.178.110)
0.222 ms 0.160 ms 0.183 ms
---------------------------------------------------------
| === Fing 5.5.2 - www.fing.io === |
|-------------------------------------------------------|
| #hop | host | avg | loss | min | max |
|-------------------------------------------------------|
| 1 | 192.168.178.110 | 0.188 | - | 0.160 | 0.222 |
---------------------------------------------------------

Wake-on-LAN

sudo fing -w 192.168.178.110