The target hosts to scan may be specified in one of three ways: by specifying the targets on the command line by specifying a file containing the targets By default, the ARP packets are sent to the Ethernet broadcastĪddress, ff:ff:ff:ff:ff:ff, but that can be changed with the -destaddr option. System interface list for the lowest numbered, configured up interface (excluding loopback). If this option is not present, arp-scan will search the The network interface to use can be specified with the -interface option. 192.168.1.0:255.255.255.0) to specify all hosts in the given network and mask.ĭescription arp-scan sends ARP packets to hosts on the local network and displays any responses thatĪre received.

Inclusive range, or IPnetwork:NetMask (e.g. 192.168.1.0/24) to specifyĪll hosts in the given network (network and broadcast addresses included), IPstart-IPend (e.g. You can also specify the target as IPnetwork/bits (e.g. The target hosts can be specified as IP addresses or hostnames.

You will need to be root, or arp-scan must be SUID root, in order to run arp-scan, because the functions that it uses to read and write Instead, or the -localnet option is used, in which case the targets are generated from the network interface IP address and netmask. Target hosts must be specified on the command line unless the -file option is given, in which case the targets are read from the specified file

Linux ip scanner