# arping(8) - man - phpman > **TLDR:** Discover and probe hosts in a network using the ARP protocol. > - Ping a host by ARP request packets: `sudo arping {{host_ip}}` - Ping a host on a specific [I]nterface: `sudo arping -I {{interface}} {{host_ip}}` - Ping a host and [f]inish after the first reply: `sudo arping -f {{host_ip}}` - Ping a host a specific number ([c]ount) of times: `sudo arping -c {{count}} {{host_ip}}` - Broadcast ARP request packets to update neighbours' ARP caches ([U]nsolicited ARP mode): `sudo arping -U {{ip_to_broadcast}}` - [D]etect duplicated IP addresses in the network by sending ARP requests with a 3 second timeout: `sudo arping -D -w {{3}} {{ip_to_check}}` *Source: tldr-pages* --- [arping(8)](https://www.chedong.com/phpMan.php/man/arping/8/markdown) [arping(8)](https://www.chedong.com/phpMan.php/man/arping/8/markdown) ## NAME arping - sends arp and/or ip pings to a given host ## SYNOPSIS **arping** [-0aAbBdDeFhpqrRuUv] [-S _host/ip_] [-T _host/ip_] [-s _MAC_] [-t _MAC_] [-c _count_] [-i _in__‐ _terface_] [ -w _seconds_ ] [ -W _seconds_ ] [ -V _vlan_ ] [ -Q _priority_ ] [ -g _group_ ] <_host_ | -B> **arping** --help ## DESCRIPTION The _arping_ utility sends **ARP** and/or **ICMP** requests to the specified _host_ and displays the replies. The _host_ may be specified by its **hostname**, its **IP** address, or its **MAC** address. One request is sent each second. When pinging an IP an ARP who-has query is sent. When pinging a MAC address a directed broad‐ cast ICMP Echo request is sent. For more technical explanation and an FAQ, see the README file. _Note_ _on_ _timing_ ARP packets are usually replied to (on a LAN) so fast that the OS task scheduler can’t keep up to get exact enough timing. On an idle system the roundtrip times will be pretty much ac‐ curate, but with more load the timing gets less exact. To get more exact timing on a non-idle system, re-nice arping to -15 or so. # nice -n -15 arping foobar This is not just an issue with arping, it is with normal ping also (at least it is on my sys‐ tem). But it doesn’t show up as much with ping since arping packets (when pinging IP) doesn’t traverse the IP stack when received and are therefore replied to faster. ## OPTIONS --help Show extended help. Not quite as extensive as this manpage, but more than -h. -0 Use this option to ping with source IP address 0.0.0.0. Use this when you haven’t con‐ figured your interface yet. Note that this may get the MAC-ping unanswered. This is an alias for -S 0.0.0.0. -a Audible ping. -A Only count addresses matching requested address (This *WILL* break most things you do. Only useful if you are arpinging many hosts at once. See arping-scan-net.sh for an ex‐ ample). -b Like -0 but source broadcast source address (255.255.255.255). Note that this may get the arping unanswered since it’s not normal behavior for a host. -B Use instead of host if you want to address 255.255.255.255. -c _count_ Only send _count_ requests. -C _count_ Only wait for _count_ replies, regardless of -c and -w. -d Find duplicate replies. Exit with 1 if there are answers from two different MAC ad‐ dresses. -D Display answers as exclamation points and missing packets as dots. Like flood ping on a Cisco. -e Like -a but beep when there is no reply. -F Don’t try to be smart about the interface name. Even if this switch is not given, -i disables this smartness. -g _group_ setgid() to this group instead of the nobody group. -h Displays a help message and exits. -i _interface_ Don’t guess, use the specified interface. -m _type_ Type of timestamp to use for incoming packets. Use -vv when pinging to list available ones. -p Turn on promiscious mode on interface, use this if you don’t "own" the MAC address you are using. -P Send ARP replies instead of requests. Useful with -U. -q Does not display messages, except error messages. -Q _priority_ 802.1p priority to set. Should be used with 802.1Q tag (-V). Defaults to 0. -r Raw output: only the MAC/IP address is displayed for each reply. -R Raw output: Like -r but shows "the other one", can be combined with -r. -s _MAC_ Set source MAC address. You may need to use -p with this. -S _IP_ Like -b and -0 but with set source address. Note that this may get the arping unan‐ swered if the target does not have routing to the IP. If you don’t own the IP you are using, you may need to turn on promiscious mode on the interface (with -p). With this switch you can find out what IP-address a host has without taking an IP-address your‐ self. -t _MAC_ Set target MAC address to use when pinging IP address. -T _IP_ Use -T as target address when pinging MACs that won’t respond to a broadcast ping but perhaps to a directed broadcast. _Example_: To check the address of MAC-A, use knowledge of MAC-B and IP-B. $ arping -S -s -p -u Show index=received/sent instead of just index=received when pinging MACs. -U Send unsolicited ARP. This sets the destination MAC address in the ARP frame to the broadcast address. Unsolicited ARP is used to update the neighbours’ ARP caches. _Example_: $ arping -i -U -v Verbose output. Use twice for more messages. -V _vlan_ VLAN tag to set. Defaults to no VLAN tag. -w _sec_ Specify a timeout before ping exits regardless of how many packets have been sent or received. -W _sec_ Time to wait between pings. ## EXAMPLES # **arping** **-c** **3** **88.1.180.225** ARPING 88.1.180.225 60 bytes from 00:11:85:4c:01:01 (88.1.180.225): index=0 time=13.910 msec 60 bytes from 00:11:85:4c:01:01 (88.1.180.225): index=1 time=13.935 msec 60 bytes from 00:11:85:4c:01:01 (88.1.180.225): index=2 time=13.944 msec --- 88.1.180.225 statistics --- 3 packets transmitted, 3 packets received, 0% unanswered # **arping** **-c** **3** **00:11:85:4c:01:01** ARPING 00:11:85:4c:01:01 60 bytes from 88.1.180.225 (00:11:85:4c:01:01): icmp_seq=0 time=13.367 msec 60 bytes from 88.1.180.225 (00:11:85:4c:01:01): icmp_seq=1 time=13.929 msec 60 bytes from 88.1.180.225 (00:11:85:4c:01:01): icmp_seq=2 time=13.929 msec --- 00:11:85:4c:01:01 statistics --- 3 packets transmitted, 3 packets received, 0% unanswered # **arping** **-C** **2** **-c** **10** **-r** **88.1.180.225** 00:11:85:4c:01:01 00:11:85:4c:01:01 ## BUGS You have to use -B instead of arpinging 255.255.255.255, and -b instead of -S 255.255.255.255. This is libnets fault. ## SEE ALSO [**ping(8)](https://www.chedong.com/phpMan.php/man/ping/8/markdown)**, [**arp(8)](https://www.chedong.com/phpMan.php/man/arp/8/markdown)**, [**rarp(8)](https://www.chedong.com/phpMan.php/man/rarp/8/markdown)** ## AUTHOR Arping was written by Thomas Habets <>. git clone arping 21th June, 2003 [arping(8)](https://www.chedong.com/phpMan.php/man/arping/8/markdown)