Use with authorization only. Scan networks and hosts you own or have explicit written permission to assess. Unauthorized scanning can violate acceptable-use policies and, in some jurisdictions, the law.

Overview

Netdiscover is an open-source command-line tool used for ARP-based host discovery on local network segments. Rather than relying on ICMP or DHCP data, it works directly with the Address Resolution Protocol, making it useful on networks where DHCP is not present or where a lower-level view of connected hosts is needed. It is commonly included in security-focused Linux distributions and used by network administrators and security practitioners for local reconnaissance tasks.

The project is distributed as open-source software under the GNU General Public License version 3 (GPLv3), meaning its source code is freely available and can be inspected, modified, and redistributed under the terms of that license.

Key capabilities

Netdiscover’s functionality centers on ARP-based discovery of devices on a local segment:

Performs active scanning by sending ARP requests across a specified address range and recording which hosts respond.
Supports passive sniffing mode, listening for ARP traffic already present on the network without generating additional requests, which can be useful for a less intrusive survey of a segment.
Operates effectively on networks without DHCP, where discovery methods relying on DHCP leases would not work.
Is well suited to wireless network reconnaissance, where identifying connected hosts at the link layer is often the fastest way to build an initial picture of a segment.
Displays discovered hosts with their MAC and IP addresses, along with vendor information derived from the MAC address where available.

Typical use cases

Netdiscover is typically used as an early step in network reconnaissance, helping administrators or security practitioners build a quick list of live hosts on a local segment before applying more targeted tools. It is particularly useful on networks lacking DHCP, on isolated lab or test segments, and in wireless environments where identifying connected clients at the ARP level is efficient. Because it operates at the link layer, it is often used alongside other diagnostic and security tools as part of a broader assessment workflow.

Netdiscover performs active network reconnaissance and must only be run on networks and systems you own or are explicitly authorized to assess. Running ARP scans against networks without permission may violate acceptable-use policies or applicable law, regardless of the tool’s open-source nature.

Licensing and pricing

Netdiscover is free and open-source software, released under the GNU General Public License version 3 (GPLv3). There is no purchase cost associated with the tool, and its licensing terms permit use, modification, and redistribution in accordance with the GPLv3.

Platform support

Netdiscover is a command-line tool primarily built for Linux, and it is commonly preinstalled or available in the repositories of security-oriented Linux distributions.

Getting started

Netdiscover’s source code and releases are maintained in its official repository at https://github.com/netdiscover-scanner/netdiscover. This catalog does not host installers or binaries; obtain the tool from the official repository or your Linux distribution’s package manager to ensure you are running a legitimate, unmodified build. Consult the repository’s documentation for build instructions, command-line usage, and details on active versus passive scanning modes before running the tool.

Where to download

Downloads are hosted by Netdiscover Project on their official website. The button below opens that site — we never host installers.

Open Netdiscover Project's official siteOpens the vendor's site in a new context. We don't host installers.