sondare

From italian: sonda di rete - network probe

sondare is a Python CLI tool for auditing local networks, built on top of Scapy. It provides scanning and fingerprinting methods, each running with multithreaded packet dispatch for speed.

• ARP — discovers all active IPv4 hosts on the local subnet (cannot be blocked by firewalls)
• NDP — discovers IPv6 hosts on the local link via ICMPv6 multicast ping + neighbor cache
• ICMP — pings all hosts to check reachability (iOS devices block ICMP by design; use ARP for full discovery)
• TCP — performs a SYN scan on a target host to find open ports; optionally grabs service banners
• UDP — probes UDP ports; reports open (got a UDP reply) or open|filtered (no response) ports
• OS fingerprinting — guesses the OS of a host by analysing TTL and TCP window size in a SYN-ACK response
• TLS/SSL probing — extracts certificate details (CN, issuer, validity, SANs) from HTTPS ports; flags expired and self-signed certs
• Hostname resolution — resolves hostnames via mDNS service browse, SSDP/UPnP, NetBIOS, and PTR records
• Network graph — renders an interactive HTML topology of the local network via dual-stack ARP + NDP discovery, with optional OS fingerprinting and vendor labels per node