A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Subscribestar or Patreon

Search Irongeek.com:

Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:


Manual Page - netdiscover(8)

Manual Reference Pages  - netdiscover (8)


netdiscover - an active/passive arp reconnaissance tool.




netdiscover [-i device] [-r range | -p] [-s time] [-n node] [-c count] [-f] [-S]


netdiscover is an active/passive arp reconnaissance tool, mainly developed to gain information about wireless networks without dhcp servers in wardriving scenarios. It can also be used on switched networks. Built on top of libnet and libpcap, it can passively detect online hosts or search for them by sending arp requests.

Furthermore, it can be used to inspect your network’s arp traffic, or find network addresses using auto scan mode, which will scan for common local networks.


-i device
  The network interface to sniff and inject packets. If no interface is specified, first available will be used.

-r range Scan a given range instead of auto scan. Valid range values area for example:, or

-p Enable passive mode. In passive mode, netdiscover does not send anything, but does only sniff.

-s time Sleep given time in milliseconds between each arp request injection. (default 1)

-c count Number of times to send each arp request. Useful for networks with packet loss, so it will scan given times for each host.

-n node Last ip octet of the source ip used for scanning. You can change it if the default host is already used. (allowed range: 2 to 253, default 66)

-S Enable sleep time suppression between each request. If set, netdiscover will sleep after having scanned 255 hosts instead of sleeping after each one. This mode was used in netdiscover 0.3 beta4 and before. Avoid this option in networks with packet loss, or in wireless networks with low signal level. (also called hardcore mode)

-f Enable fast mode scan. This will only scan for .1, .100 and .254 on each network. This mode is usefull while searching for ranges being used. After you found such range you can make a specific range scan to find online boxes.


If passive mode (-p) or scan range (-r) options arent enabled, netdiscover will scan for common lan addresses.

Screen control keys

h Show help screen

j Scroll down (or down arrow)

k Scroll up (or up arrow)

a Show arp replys list

r Show arp requests list

q Close help screen or end application


netdiscover was written by Jaime Peņalba.

This manual page was originaly written by Nicolas Weyland <ufoalien@weyland.ch>,for the Debian project (but may be used by others). This man page has been added to netdiscover project, and modified from the original.
Top of page | 

netdiscover netdiscover (8) October 2005

Generated by manServer 1.07 from /usr/local/man/man8/netdiscover.8 using man macros.

Printable version of this article

15 most recent posts on Irongeek.com:

    If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

    Copyright 2019, IronGeek
    Louisville / Kentuckiana Information Security Enthusiast