How to scan an EtherNet/IP network? (Not Angry IP Scanner)

[crustyneon]

Scenario:

You show up on site and the only knowns are Omron PLC and EtherNet/IP network.

You have a laptop loaded with CX-One, an ethernet cable, and the ethernet port that is connected to a known EtherNet/IP Omron network (you can not see the PLC).

I have previously worked with Siemens systems and used Primary Setup Tool and Proneta with wonderful results.

Do similar tools exist for an Omron environment?

Question:

How to (relatively quickly, not by ping every possible ip address with something like Angry IP Scanner) scan an EtherNet/IP network for connected devices without knowing their ip addresses?

[crustyneon]

Since the networks on these systems tend to be pretty small, I came up with a solution that I should have thought of before posting the question.

Solution:

Use Wireshark to look through exchanged packets on the network and look for ARP Announcement.

In my case, I found the packet for the HMI shows the Source as Keyence, and the info contains the IP address.

Likewise, the packet for the PLC shows the Source as Omron, and the info contains the IP address.

This works even if the IP address of the laptop is in a different subnet.

In conclusion, if you don't know who is there, listen to what they are saying.