Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I need to locate the IPs of devices by their mac address on a Windows system, I normally use Advanced IP Scanner (from to scan the network, then I use arp -a to list the mac addresses.

Is it possible to use nmap to perform the same function in Linux and possibly in Windows? Can nmap to the scanning and produce both IPs and MAC addresses?

I have tried arp -a in Linux but it doesn't seem to work as quickly as in Windows or appears to require some use input.


share|improve this question
nmap -sP – Iraklis Jun 4 '10 at 7:49
up vote 5 down vote accepted

You can use the Ping scans, which start with the P-flag. However, I personally use -sL for this job.

share|improve this answer
+1 I use -sP as well. But attention, to be able to get mac addresses you have to be on the same lan (no routers in between). – Pier Jun 4 '10 at 7:51
I have tested with the -sP option and it is exactly what I am looking for, thanks to Pier and Iraklis. It is for scanning for items getting their IPs via DHCP or static in the local network. – vfclists Jun 4 '10 at 8:34

Using nmap a lot of info can be regarded..

nmap -A -v -v gives a lot of information, even SO in some cases

nmap -sP gives the MAC and IP addresses. Very Usefull too

sudo nmap -PU explains every IP address

share|improve this answer

The following command with nmap with root privilegies (or using sudo):

sudo nmap -sP | awk '/Nmap scan report for/{printf $5;}/MAC Address:/{print " => "$3;}' | sort

results in: => 00:50:56:AF:56:FB => 00:26:73:78:51:42 => 3C:D9:2B:70:BC:99
share|improve this answer

This commands scans all IP addresses in a range and shows the MAC address of each IP address. It does this in a greppable format, or in other words; displays IP and MAC address on a single line. Thats handy if you want to export to Excel or run a grep on it.

nmap -n -sP | awk '/Nmap scan report/{printf $5;printf " ";getline;getline;print $3;}'

It seems to also work for IP's/MAC's which are not already in the hosts ARP table. That's a good thing.

The command results in: B8:27:EB:8E:C5:51 00:26:B6:E1:4B:EB 00:01:29:02:55:25
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.