Answer by derobert for nmap & arp cache behaviour
It shows "host up" because you told nmap to assume the host is up—that's what -P0 (or its newer equivalent -Pn) does. Presumably it shows up in the arp cache like this: Address HWtype HWaddress Flags...
View Articlenmap & arp cache behaviour
Why does the target of a nmap scan, where the target does not exist get entered into the arp cache? nmap -v -P0 -sT 192.168.1.103 That scan always shows "host up". This behaviour made me go crazy...
View Article
More Pages to Explore .....