An explanation of the layer 2 probing techniques used by D3K is now availible. The paper includes the purpose of D3K and the methods for finding MAC based firewalled hosts.
Remixed, Remade, Remodeled
BruteDNS is a dictionary words resolv probe for detecting hostnames. This is mostly handy when you can't do a zone transfer.