# Install arp-scan with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper ARP scanning and fingerprinting tool. Version 1.10.0 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:arp-scan ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install arp-scan ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install arp-scan ``` Evidence: MacPorts ports tree: net/arp-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add arp-scan ``` Evidence: Alpine Linux edge package indexes: arp-scan from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install arp-scan ``` Evidence: Debian stable package indexes: arp-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install arp-scan ``` Evidence: Fedora Rawhide package metadata: arp-scan from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#arp-scan ``` Evidence: nixpkgs package indexes: pkgs/by-name/ar/arp-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S arp-scan ``` Evidence: Arch Linux sync databases: arp-scan from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install arp-scan ``` Evidence: openSUSE Tumbleweed package metadata: arp-scan from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:arp-scan - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.10.0 - **Source summary:** ARP scanning and fingerprinting tool - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-3.0-or-later AND BSD-3-Clause AND ISC - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - arp-fingerprint (cli) - arp-scan (cli) - get-iab (cli) - get-oui (cli) - arp-fingerprint (alias) - arp-scan (alias) - get-iab (alias) - get-oui (alias) ## Build dependencies - autoconf - automake ## Uses from macOS - libpcap ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.10.0 - Local data: ok - Upstream repository: https://github.com/royhills/arp-scan - Upstream latest detected: 1.10.0 (current) - info: No package-manager update timestamp was available. ## Project history and usage arp-scan is a C network scanning tool that discovers and fingerprints IPv4 hosts on a local network using ARP. Upstream documents support for Linux, BSD, macOS, and Solaris, and ships the companion commands `arp-fingerprint`, `get-oui`, and `mac-vendor` data handling. ### Project history Roy Hills' upstream changelog records version 1.4 on 2006-06-26 as the first stable public version, after internal versions 1.0 through 1.2 and a 1.3 beta. Early work quickly moved from Linux packet sockets toward portable link-layer support, adding BPF support for BSD and Darwin, Solaris DLPI work, IEEE OUI/IAB update scripts, and packet-generation tests. The project moved from an internal SVN repository to GitHub in 2013 during the 1.9.2 cycle. That move also changed the development identifiers from increasing SVN revision IDs to Git object hashes and shifted public collaboration toward issues and pull requests. Later releases kept the old-school Unix toolchain shape, using autoconf/automake, libpcap, manual pages, and text data files, while modernizing around security and portability. The 1.10.0 release added Linux POSIX.1e capability support, flexible output formatting, JSON/XML-format examples, and a consolidated IEEE registry file. ### Adoption history The README explicitly says many distributions provide binary packages and that BSD users may install from ports. The supplied facts show broad package-manager coverage across apk, Homebrew, Debian, Fedora/dnf, MacPorts, Nix, pacman, Ubuntu, and zypper, which matches its role as the canonical packaged ARP LAN scanner. arp-scan became a package-manager staple because it solves a common administrator problem without requiring IP-layer cooperation: discovering hosts on the local Ethernet segment and mapping MAC prefixes to vendors. It is small enough for scripts, but detailed enough for security inventories, lab networks, appliance discovery, and duplicate-address investigations. ### How it is used The core invocation sends ARP requests on a local link and prints responding IP/MAC/vendor rows. The README points users to `arp-scan --help` and the manual pages for `arp-scan(1)`, `arp-fingerprint(1)`, `get-oui(1)`, and `mac-vendor(5)`. Packaging details matter because the executable needs raw-packet privileges. Upstream's packager notes ask Linux builders to enable libcap support when possible; `make install` can install `arp-scan` with `CAP_NET_RAW` or fall back to setuid root. The tool's vendor lookup depends on local IEEE registry-derived files. Upstream has repeatedly updated its OUI/IAB handling as IEEE changed registry formats and URLs, and 1.10.0 moved `mac-vendor.txt` into the system configuration directory so local changes can survive upgrades. ### Why package nerds care arp-scan is the baseline package against which newer ARP scanners are compared. It is also a neat example of why network tools need package metadata beyond a homepage: raw socket privileges, capability installation, bundled data files, manual pages, and helper scripts all affect the package experience. The name collision with arp-scan-rs is important: both may install an `arp-scan` command, but their upstreams, licenses, implementation languages, option sets, and release histories are distinct. ### Timeline - 2006: Version 1.4 released as the first stable version. - 2007: Version 1.6 released after portability and frame-handling improvements. - 2011: Version 1.8 added macOS support and changed license from GPLv2 to GPLv3. - 2013: Development moved from internal SVN to GitHub. - 2022: Version 1.10.0 added Linux libcap capability support and flexible output formatting. - 2025: Changelog shows continuing maintenance and IEEE registry updates. ### Related projects - arp-scan-rs is a Rust rewrite inspired by arp-scan. - libpcap provides packet capture support. - libcap enables Linux CAP_NET_RAW packaging. - IEEE registry data backs MAC vendor lookups. ### Sources - - - - source_facts.executables - source_facts.package-manager ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** arp-scan - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Conflicts With:** arp-scan-rs - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - arp-scan - 1.10.0-2+b1: normalized package name match | Debian stable package indexes: arp-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | arp scanning and fingerprinting tool | https://github.com/royhills/arp-scan - Nix - arp-scan: normalized package name match | nixpkgs package indexes: pkgs/by-name/ar/arp-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - arp-scan - 1.10.0-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: arp-scan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | arp scanning and fingerprinting tool | https://github.com/royhills/arp-scan - apk - arp-scan - 1.10.0-r2: normalized package name match | Alpine Linux edge package indexes: arp-scan from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Address Resolution Protocol (ARP) packet scanner | https://github.com/royhills/arp-scan - apk - arp-scan-doc - 1.10.0-r2: normalized package name match | Alpine Linux edge package indexes: arp-scan-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Address Resolution Protocol (ARP) packet scanner (documentation) | https://github.com/royhills/arp-scan - dnf - arp-scan - 1.10.0-10.fc44: normalized package name match | Fedora Rawhide package metadata: arp-scan from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Scanning and fingerprinting tool | https://github.com/royhills/arp-scan - pacman - arp-scan - 1.10.0-5: normalized package name match | Arch Linux sync databases: arp-scan from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A tool that uses ARP to discover and fingerprint IP hosts on the local network | https://github.com/royhills/arp-scan - zypper - arp-scan - 1.10.0-1.13: normalized package name match | openSUSE Tumbleweed package metadata: arp-scan from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | ARP scanning and fingerprinting tool | https://github.com/royhills/arp-scan - MacPorts - arp-scan: normalized package name match | MacPorts ports tree: net/arp-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [autoconf](https://www.automicvault.com/pkg/brew/autoconf/) - Build dependency declared by Homebrew. - [automake](https://www.automicvault.com/pkg/brew/automake/) - Build dependency declared by Homebrew. - [arping](https://www.automicvault.com/pkg/brew/arping/) - Shares av.db curated category or tags: arp, cli, networking. - [havn](https://www.automicvault.com/pkg/brew/havn/) - Shares av.db curated category or tags: cli, network-scanner, networking. - [netscanner](https://www.automicvault.com/pkg/brew/netscanner/) - Shares av.db curated category or tags: cli, network-scanner, networking. - [smap](https://www.automicvault.com/pkg/brew/smap/) - Shares av.db curated category or tags: cli, network-scanner, networking. - [activemq](https://www.automicvault.com/pkg/brew/activemq/) - Shares av.db curated category or tags: cli, networking. - [adns](https://www.automicvault.com/pkg/brew/adns/) - Shares av.db curated category or tags: cli, networking. - [aerleon](https://www.automicvault.com/pkg/brew/aerleon/) - Shares av.db curated category or tags: cli, networking. - [ahcpd](https://www.automicvault.com/pkg/brew/ahcpd/) - Shares av.db curated category or tags: cli, networking. ## Combined YAML source View the package source record on GitHub. [combined/arp-scan.yml](https://github.com/automic-vault/db/blob/main/combined/arp-scan.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph