Note that it doesn't display the flags field. While it may appear less human-friendly, this format might serve better if you plan to process the output with a script since you won't have to consider how many tabs might be sitting between the various columns or jump past the first line to start with the data on line 2. The mask field will display an optional mask if one is used.Ĭompare the output above to what you see below. M = permanent (static field that was entered manually)Īddresses marked as static (PERM) were likely added to the table through a deliberate arp -s command like this: $ sudo arp -s 192.168.0.33 7c:67:a2:cf:9f:ef.Some systems, especially servers, might have multiple network interfaces. The last column, Iface, means 'interface' and represents the port on the system through which all of the connections are being made. One of the two devices that don't show a C in this example is a cell phone.

In this example, all but one connection are marked C, which means 'complete' and verifies the connection was successful. The second (HWtype) indicates that the connections are Ethernet connections, and the third (HWaddress) is the MAC address of each device. The first column shows IP addresses or host names. The first line contains the column headings. Here's an example of the arp command and what it shows you: $ arpĪddress HWtype HWaddress Flags Mask Ifaceįruitfly ether 7c:67:a2:cf:9f:ef CM enp0s25Ĭomtrend.Home ether f8:8e:85:35:7f:b9 C enp0s25ĭragonfly ether 20:ea:16:01:55:eb C enp0s25 (An arp-a command also will show the arp table in the command prompt on a Windows box, by the way.) Add -a to condense the output if you don't want to see the data organized into columns with headings. To display the ARP table on a Linux system, just type 'arp'.

Mac terminal scan network for devices