Technically some features accept remote hosts, but you must have authorization. Defaults discourage non-private targets. Unauthorized scanning can be illegal.
It traceroutes toward the internet and suggests private hop networks (e.g. shared building infrastructure). Only use this with permission.
Install from the repo root:
pip install -e .Use python -m netsweep or ensure your virtualenv’s bin directory is on PATH.
Packaging and typing assumptions for 5.1; older 3.7 is no longer the supported floor.
Older versions scanned zero hosts for /32. Current code includes /31 and /32 addresses. Update to 5.0+.
Default cap is 1000 hosts. Raise it in ~/.netsweep/config.json only if you accept the risk, or scan smaller CIDRs.
Offline OUI covers common vendors only. Enable online_vendor_lookup or pass allow_online=True in code (privacy tradeoff). Randomized MACs return Randomized/Private MAC.
Usually missing root privileges or Scapy. Use TCP connect scan, or install Scapy and run with appropriate capabilities.
IPv6 is not supported in 5.1. Use IPv4 or wait for a future release.
| CLI | -t |
|---|---|
| LAN | threads |
| Host | target |
Use long options in scripts: --threads, --target, --timeout.
No. They can contain topology and residual banner data. .gitignore excludes typical output dirs.
Not by default. Online MAC vendor lookup is opt-in. Scans themselves only talk to targets you specify (and optional vendor API if enabled).
Pre-5.0 banner export could store full HTTP bodies. Current redaction strips Set-Cookie / auth headers and caps size. Delete old artifacts.
Under netsweep/. The only root launcher is run.py.
New tests should import netsweep.*. Existing suite was updated for 5.1.
Use GitHub issue templates: https://github.com/sondt99/NetSweep/issues/new/choose
Security vulns: SECURITY.md.