ARP Scan Tool

Overview
Purpose
Capabilities
Video
About ARP

About the ARP Scan Tool

The ARP Scan Tool (also called ARP Sweep or MAC Scanner) is a very fast ARP packet scanner that shows every active IPv4 device on your subnet. Since ARP is non-routable, this type of scanner only works on the local LAN (local subnet or network segment).

The ARP Scan Tool shows all active devices even if they have firewalls. Devices cannot hide from ARP packets like they can hide from Ping. To find active IP addresses outside your subnet, use the Ping Scan Tool (a Ping Sweep tool AKA NetScanner).

Related Tools

ARP Cache Tool.
ARP Ping.
Packet Generator - has an ARP/RARP packet generating mode.

Explore the tools >>
See tool videos >>
Download a free demo >>

Version 11 ARP Scan Tool Slideshow

Important Notes:

ARP packets are not routable (the packets will not go beyond your router), so this tool is limited to target IPv4 addresses on the same network segment or subnet as your computer is currently on.
The ARP Protocol requires you to know the IPv4 address of the target. You cannot 'ping' a MAC address and get an IP address back in return -- the ARP protocol does not work that way.

Purpose of this tool

This tool discovers all active devices in a IPv4 range (usually a subnet) even if protected by software designed to hide the presence of the device - personal firewalls, operating system firewalls or other stealth programs.

Tool Capabilities

Sends ARP Packets to every IPv4 address specified and looks for the mandatory ARP Reply.

ARP is not routed, so you are limited to IP addresses in your subnet. IPv4 connected devices cannot hide from ARP - the must respond if they are to be communicating using ethernet.

Displays your ARP Cache Table..

Shows all entries in the ARP cache after the scan. The manufacturer of each remote device's network interface is shown. The hostname for each IP address can be optionally shown.

A video of the ARP Scan Tool in action!

What is ARP?

ARP (Address Resolution Protocol) is a protocol which associates an IPv4 address with a MAC (Media Access Control) address (xx-xx-xx-xx-xx-xx) over an ethernet network segment. ARP is normally not routed beyond a network segment. This tool uses WinPcap to generate ARP packets. See also the ARP Cache tool for ARP cache manipulation and the ARP Ping tool for testing a single device on your LAN.