How to get a list of all IP addresses (and ideally device names) on a LAN?

Question

Our network gave an error that there was an IP address conflict and I'd like to find what all the device IP addresses are. (I've also had need of that before). (update/clarification:I'm looking for a Windows-based too.)

Any suggestions?

I've read suggestions for various tools (Look@Lan, Angry IP Scanner) and I'm looking for suggestions from people who have used these or other tools.

Related: [Get IP addresses and Computer Names in the Same Network](https://serverfault.com/q/30738/407822) — Stevoisiak, Jun 21 '18 at 15:56

score 39 · Answer 1 · edited Mar 01 '18 at 22:09

If there's a unix box on the network, you could try arp-scan:

ARP scanner | Linux man page

$ arp-scan --interface=eth0 192.168.0.0/24
Interface: eth0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.4 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.0.1     00:c0:9f:09:b8:db       QUANTA COMPUTER, INC.
192.168.0.3     00:02:b3:bb:66:98       Intel Corporation
192.168.0.5     00:02:a5:90:c3:e6       Compaq Computer Corporation
192.168.0.6     00:c0:9f:0b:91:d1       QUANTA COMPUTER, INC.
192.168.0.12    00:02:b3:46:0d:4c       Intel Corporation
192.168.0.13    00:02:a5:de:c2:17       Compaq Computer Corporation
192.168.0.87    00:0b:db:b2:fa:60       Dell ESG PCBA Test
192.168.0.90    00:02:b3:06:d7:9b       Intel Corporation
192.168.0.105   00:13:72:09:ad:76       Dell Inc.
192.168.0.153   00:10:db:26:4d:52       Juniper Networks, Inc.
192.168.0.191   00:01:e6:57:8b:68       Hewlett-Packard Company
192.168.0.251   00:04:27:6a:5d:a1       Cisco Systems, Inc.
192.168.0.196   00:30:c1:5e:58:7d       HEWLETT-PACKARD
13 packets received by filter, 0 packets dropped by kernel
Ending arp-scan: 256 hosts scanned in 3.386 seconds (75.61 hosts/sec).  13
responded

Definitely handy, although note that it gives you the manufacturer of the NIC, not the network name of the device. — Craig Tullis, Aug 16 '16 at 23:03

score 37 · Accepted Answer · answered May 20 '09 at 23:01

37

Using nmap to do a sweep of the subnet is one quick and simple way to do this that I've used before, the various options will allow you to do a more detailed inspection also.

answered May 20 '09 at 23:01

Whisk

1,883
1
16
21

2

To set the target of your nmap scan, determine your default gateway by running `ipconfig` from the command prompt. Use it in the target field, e.g. Target: `192.168.1.1/24`. Then click scan. – Shaun Luttin Jan 15 '16 at 00:51
Related answer : http://serverfault.com/a/30742/199688 – Lucky Aug 22 '16 at 07:38

Peter · Answer 3 · 2009-05-20T23:55:11.163

11

As mentioned nmap (http://nmap.org/) is probably a good, quick and free option. Just be careful with it, there are some very aggressive options that could crash machines.

This command will do a simple ping sweep of the selected subnet and should be completely safe.

nmap -rP 192.168.1.1/24

Obviously, replace with your own network information.

You mentioned that a duplicate IP address was identified. Both machines should have generated a warning screen, which should allow you to identify the machines. If DHCP is used, then another request should have been generated and the problem may have self resolved.

edited May 20 '09 at 23:55

answered May 20 '09 at 23:16

Peter

5,403
1
25
32

2

For later versions of nmap, the command is: nmap -r -sn 192.168.1.0/24 – simpleuser May 15 '18 at 18:33
1

@simpleuser Thanks. I downloaded http://nmap.org for Windows and ran `nmap -sn -r 192.168.0.0/24` in PowerShell as Admin. – Ryan May 06 '22 at 22:34

score 11 · Answer 4 · answered May 20 '09 at 23:25

11

Quick and dirty (on Linux):

$ ping -b 192.168.1.255
$ arp -a

answered May 20 '09 at 23:25

Ivan

3,172
3
24
34

just tried that out. could it be some hosts do not respond to broadcasts ? or is this a sure thing I misconfigured the subnetmask on them ? – lImbus May 20 '09 at 23:38
1

No, some could not be responding (firewall?). – Ivan May 20 '09 at 23:50
1

It is true that many hosts won't respond to broadcasts, but +1 for running arp -a after running nmap. :) – jns May 21 '09 at 10:31
I meant ping, not nmap – jns May 21 '09 at 10:32
1

FWIW, `arp -a` worked for me on Windows 10 too. – pseudosavant Mar 06 '17 at 21:56

score 8 · Answer 5 · edited Apr 13 '17 at 12:14

A list of IP addresses on the LAN will be of limited help, as the issue is there are two machines trying to use the same IP address.

I would suggest that you attempt to find the MAC addresses of the two machines that are clashing.

What device logged the IP address conflict? Was it a server, router, etc.? Some platforms (Solaris and BSD) will log the MAC address of the offending host along with the error message. If the IP address in question is within one of your DHCP pools, it's also worth checking your DHCP server's logs for the MAC address it's attempting to assign that IP address to.

Failing that, I would recommend logging on to the default router of the subnet that this problem is occurring on, and monitoring the ARP table. There should be one IP address that flips between multiple MAC addresses; again, those two MAC addresses represent the devices you are interested in.

Once you have the MAC addresses of the two devices, you should be able to tie them to specific switch ports. This question provides more information on how to do that. You can also use an OUI lookup tool to help identify the manufacturer of each device.

If there's a DHCP server trying to assign that IP, there should be a log entry containing the offending MAC address. — Kara Marfia, May 21 '09 at 14:14
With the MAC address, you can also look up the manufacturer of the device or NIC using http://standards.ieee.org/regauth/oui/index.shtml — bk1e, May 22 '09 at 07:06

score 6 · Answer 6 · edited Jan 18 '18 at 21:42

6

NMap should give you what you're looking for (or ZenMap if you want a friendlier interface).

As an added bonus, it'll also detect all the services that the other computers are running, and possibly make your IDS (intrusion detection system) freak out.

edited Jan 18 '18 at 21:42

Stevoisiak

123
8

answered Jun 23 '09 at 15:50

RainyRat

3,700
1
23
29

score 3 · Answer 7 · edited Jan 18 '18 at 23:35

3

You didn't say if it had to be a Linux app.

If you can use Windows, Advanced IP Scanner is free and works very well.

edited Jan 18 '18 at 23:35

Stevoisiak

123
8

answered May 21 '09 at 07:32

John Rennie

7,756
1
22
34

score 3 · Answer 8 · answered May 21 '09 at 13:31

3

I've always been a fan of Angry IP Scanner.
Yes, not as full featured as NMAP, but can show quite a bit of data quickly.

answered May 21 '09 at 13:31

Brian

621
6
12

Also available for other platforms, as it is Java. I've been using it on Mac and Linux for years. – AveryFreeman Nov 04 '18 at 08:16

score 2 · Answer 9 · answered May 26 '09 at 03:44

If you have access to the router that's acting as the default gateway for the subnet in question, then listing the ARP cache on the router (I believe it's just "show arp" on a Cisco IOS device) is the best way to go.

The other answers in this thread (ping sweeps, nmap, broadcast pings, etc) are likely to be inadequate these days with so many systems running personal/host based firewalls that block pings, etc.

The router arp cache may still not be 100%. It won't show any hosts that haven't communicated within the arp timeout period, or at least that haven't communicated off subnet within the arp timeout period. But in most cases it's much more likely to get you more complete results than any other method.

score 2 · Answer 10 · answered Jun 03 '09 at 01:01

From the good (bad?) old days, I used to use a tool called WS_PING - from the same people who provided the venerable WS_FTP.

It's only a trial, but you can grab it from http://www.whatsupgold.com/products/ws_ping-propack/ - it'll do everything you want and do it from Windows 95!

amyassin · Answer 11 · 2013-07-12T09:33:55.830

2

I suggest using Fing. It's a simple network scanner that is available for Windows, Mac, Linux, and even for mobile devices for wireless networks (Android and iOS devices). And it can easily be used in scripting.

edited Jul 12 '13 at 09:33

answered Oct 19 '12 at 19:35

amyassin

337
2
7
22

score 1 · Answer 12 · answered May 23 '09 at 04:34

There is a little app I use called "kiss the net" that scans and generates a pdf network map for you.

It's based on a server monitoring/management product called "The Dude" made by mikrotik.

http://www.mikrotik.com/download/KTN_1.0beta1.zip
Requirements: Windows XP/2000/2003/Vista with Internet Exporer 6 or better.

score 1 · Answer 13 · edited Jul 19 '18 at 19:46

1

Colasoft Mac Scanner is one way to do it. It delivers IP address, name, and MAC address.

edited Jul 19 '18 at 19:46

Peter Mortensen

2,319
5
23
24

answered Dec 09 '10 at 12:17

MadBoy

3,703
13
61
93

How to get a list of all IP addresses (and ideally device names) on a LAN?

13 Answers13

Linked