Sniffing & Spoofingarppingnetworkdiscoverymacip

arping

arping sends ARP and/or ICMP requests to a specified host and displays the replies. The host can be identified by hostname, IP address, or MAC address.

Description

The arping utility is designed to send IP and/or ARP pings to a given host, displaying the replies it receives. This tool is particularly useful for network diagnostics, verifying host reachability at the link layer, and mapping IP to MAC address relationships without relying on higher-layer protocols.

Common use cases include checking if a host is alive on the local network, discovering MAC addresses for devices on the same subnet, or troubleshooting ARP resolution issues. It supports specifying the target by hostname, IP, or MAC address, making it versatile for various network probing scenarios.

arping operates by crafting and transmitting ARP requests or ICMP echo requests directly, bypassing standard routing behaviors. This allows for precise control over source addressing and interface binding, essential in environments where interfaces are not yet fully configured or for targeted link-layer communication.

How It Works

arping sends ARP requests (for MAC resolution) and/or ICMP echo requests (IP pings) to the target host, capturing and displaying replies. It binds to a specific interface if specified, supports custom source IP (-S), target IP (-T), source/target MAC (-s/-t), and handles VLAN tagging (-V) or priority (-Q). Replies are filtered and counted based on options like -c for packet count or -A for address matching.

Installation

bash
sudo apt install arping

Flags

-0Use this option to ping with source IP address 0.0.0.0. Use this when you haven't configured your interface yet. Note that this may get the MAC-ping unanswered. This is an alias for -S 0.0.0.0.
-aAudiable ping.
-AOnly count addresses matching requested address (This *WILL* break most things you do. Only useful if you are arpinging many hosts at once. See arping-scan-net.sh for an example).

Examples

Sends ARP and/or IP pings to the specified host, IP, or MAC address and displays replies.
arping <host/ip/MAC>
Pings with source IP 0.0.0.0, useful for unconfigured interfaces.
arping -0 <host/ip>
Performs audible ping to the target host.
arping -a <host/ip>
Counts only addresses matching the requested address, for multi-host scenarios.
arping -A <host/ip>
Binds to specific network interface for sending pings.
arping -i <interface> <host/ip>
Sends specified number of ping requests and stops.
arping -c <count> <host/ip>
Uses custom source IP for the ping requests.
arping -S <host/ip> <target>
Updated 2026-04-16kali.org ↗