判断局域网某主机的操作系统以及设备的品牌型号

nmap -O 10.10.2.1 Starting Nmap 7.01 ( https://nmap.org ) at 2016-12-23 09:12 CST Nmap scan report for 10.10.2.1 Host is up (0.00057s latency). Not shown: 990 filtered ports PORT STATE SERVICE 22/tcp closed ssh 53/tcp closed domain 80/tcp closed http 443/tcp closed https 1723/tcp open pptp 3306/tcp closed mysql 3690/tcp closed svn 8080/tcp open http-proxy 8888/tcp closed sun-answerbook 9100/tcp closed jetdirect MAC Address: 00:90:7F:84:50:94 (WatchGuard Technologies) Aggressive OS guesses: Linux 2.6.32 (97%), IPFire 2.11 firewall (Linux 2.6.32) (93%), Linux 2.6.35 (90%), IGEL UD3 thin client (Linux 2.6) (90%), DD-WRT v24-sp1 (Linux 2.4) (90%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.8 (89%), Kyocera CopyStar CS-2560 printer (88%), QNAP NAS Firmware 3.8.3 (Linux 3.X) (88%), Linux 3.11 - 4.1 (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 1 hop OS detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 11.12 seconds

arp协议应该可以实现你的需求。

nmap or netbios