ARP - To display ARP cache in Windows
Posted on Sep 08, 2007 under IP Tools, Networking, Windows |Tags:ARP IP Tools Linux network Windows   
Address Resolution Protocol is the one which is used to find the hardware address of a device (MAC Address) using its IP Address on the network. The Windows ARP tool helps to display and modify the ARP table on the system. A simple usage of arp command would be to display the ARP table: From the command prompt type,
arp -a
This will display the ARP table on the system as follows:
C:\>arp -a
Interface: 192.168.0.2 — 0×3
Internet Address Physical Address Type
192.168.0.1 00-18-4d-f8-a4-6e dynamic
To clear the ARP table, use
c:\> arp -d *
If you want to delete a specific entry then simply type,
c:\> arp -d <IP Address>
Ex: c:\> arp -d 172.1.1.1
Alternatively, use
C:\> netsh interface ip delete arpcache
NOTE: In Windows Vista, you need to be an administrator to run the above commands
If you want to add a manual entry (static) then enter,
c:\> arp -s <IP Address> <Ethernet (MAC) Address>
Ex: arp -s 172.1.1.1 00-aa-00-62-c6-09
If there is more than one Interface on the system and you want to display all the ARP entries for the interface then
C:\> arp -a -N <Interface IP>
Ex: arp -a -N 192.168.0.2
Interface: 172.1.1.1 — 0×3
Internet Address Physical Address Type
172.1.1.1 00-28-4d-f1-d4-6e dynamic
A detailed Wiki article on ARP is available here
If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!


by Keeper, on January 18 2008 @ 10:10 am
Do you know some method that can help to delete fake arp entry on windows vista?
Execution of these commands fails:
arp -d *
arp -s
by admin, on January 18 2008 @ 11:28 am
“arp -d” should work. Might not be able to run the command if you are not an administrator?
What is the error when you try to delete the arp entry?
by Alica Alfred, on July 3 2008 @ 1:19 pm
What is the timeout for cache entries for arp in Windows?
by Sam, on August 28 2008 @ 3:41 am
hi. should my arp table show ip of many of the computers in a network or should it show me only the default gateway? please be as clrear as you can be. thanks in advance.
by admin, on August 28 2008 @ 3:06 pm
ARP table should show entries from your local subnet. By default, your interface and the Default Gateway are in the same subnet and are shown. If you have any other host in the same subnet then try pinging it and lookup the arp table. You should see that IP in ur ARP table added