Subscribe Subscribe | Subscribe Comments RSS
Subscribe in Bloglines

Add to netvibes
Add to Google Reader or Homepage
Links to Site

Address Resolution Protocol is the one which is used to find the hardware address of a device (MAC Address) using its IP Address on the network. The Windows ARP tool helps to display and modify the ARP table on the system. A simple usage of arp command would be to display the ARP table: From the command prompt type,

arp -a

This will display the ARP table on the system as follows:

C:\>arp -a

Interface: 192.168.0.2 — 0×3

Internet Address Physical Address Type

192.168.0.1 00-18-4d-f8-a4-6e dynamic

To clear the ARP table, use

c:\> arp -d *

If you want to delete a specific entry then simply type,

c:\> arp -d <IP Address>

Ex: c:\> arp -d 172.1.1.1

Alternatively, use

C:\> netsh interface ip delete arpcache

NOTE: In Windows Vista, you need to be an administrator to run the above commands 

If you want to add a manual entry (static) then enter,

c:\> arp -s <IP Address> <Ethernet (MAC) Address>

Ex: arp -s 172.1.1.1 00-aa-00-62-c6-09

If there is more than one Interface on the system and you want to display all the ARP entries for the interface then

C:\> arp -a -N <Interface IP>

Ex: arp -a -N 192.168.0.2

Interface: 172.1.1.1 — 0×3

Internet Address Physical Address Type

172.1.1.1 00-28-4d-f1-d4-6e dynamic

A detailed Wiki article on ARP is available here

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

5 Comments so far »

  1. by Keeper, on January 18 2008 @ 10:10 am

     

    Do you know some method that can help to delete fake arp entry on windows vista?

    Execution of these commands fails:

    arp -d *
    arp -s

  2. by admin, on January 18 2008 @ 11:28 am

     

    “arp -d” should work. Might not be able to run the command if you are not an administrator?

    What is the error when you try to delete the arp entry?

  3. by Alica Alfred, on July 3 2008 @ 1:19 pm

     

    What is the timeout for cache entries for arp in Windows?

  4. by Sam, on August 28 2008 @ 3:41 am

     

    hi. should my arp table show ip of many of the computers in a network or should it show me only the default gateway? please be as clrear as you can be. thanks in advance.

  5. by admin, on August 28 2008 @ 3:06 pm

     

    ARP table should show entries from your local subnet. By default, your interface and the Default Gateway are in the same subnet and are shown. If you have any other host in the same subnet then try pinging it and lookup the arp table. You should see that IP in ur ARP table added

Comment RSS · TrackBack URI

Leave a comment

Name: (Required)

eMail: (Required)

Website:

Comment: