Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a handful of Macs on my home network, and shell access to only one of them from the outside. How can I figure out what IP address of the other machines are?

share|improve this question
up vote 25 down vote accepted

Try arp -a to see your computer's current arp table. It will show only those IP addresses your computer has interacted with. Output like this (obscured a little to hide MAC addresses on my network):

$ arp -a
? ( at xx:xx:9e:82:ab:f6 on en1 ifscope [ethernet]
? ( at xx:xx:29:d3:17:8 on en1 ifscope [ethernet]
? ( at xx:xx:2:4f:76:14 on en1 ifscope [ethernet]
? ( at xx:xx:6b:d0:36:a5 on en1 ifscope [ethernet]
? ( at (incomplete) on en1 ifscope [ethernet]
? ( at xx:xx:65:46:cd:b8 on en1 ifscope [ethernet]
? ( at ff:ff:ff:ff:ff:ff on en1 ifscope [ethernet]
? ( at ff:ff:ff:ff:ff:ff on vmnet8 ifscope [ethernet]
? ( at (incomplete) on vmnet1 ifscope [ethernet]

If you don't have further information on which computer is which, you can gain a little more information by identifying the manufacturers of the network cards through MAC address lookup.

share|improve this answer
+1 for ARP lookup – Apr 30 '10 at 4:00
Sorry it took almost 4 years to mark this as correct. – Jon Haddad Mar 14 '14 at 17:00
What does it mean "arp -a will show only those IP addresses your computer has interacted with." ? Should I ping the broadcast ( first and get response from every device and then use arp to get a complete list since I just interacted/pinged all the device? – Weishi Zeng Apr 2 '15 at 23:37

Assuming all the other machines are in the same broadcast domain as the one to which you have access, pinging the broadcast address will often suffice. It will not find machines that are asleep, nor those configured to not respond to pings, nor those that will respond to pings but not to broadcast pings.

% ifconfig -a | grep broadcast
        inet netmask 0xffffff00 broadcast
% ping -i 5 -c 2
PING ( 56 data bytes
64 bytes from icmp_seq=0 ttl=64 time=0.393 ms
64 bytes from icmp_seq=0 ttl=255 time=2.511 ms (DUP!)
64 bytes from icmp_seq=0 ttl=64 time=5.810 ms (DUP!)
64 bytes from icmp_seq=0 ttl=64 time=7.886 ms (DUP!)
64 bytes from icmp_seq=1 ttl=64 time=0.312 ms

--- ping statistics ---
2 packets transmitted, 2 packets received, +3 duplicates, 0% packet loss
round-trip min/avg/max/stddev = 0.312/3.382/7.886/3.010 ms

The first and last response will almost always be your local machine. The (DUP!) responses are from other machines (though this example also show some machine responding with the broadcast address itself, which is not terribly useful).

You might also try the all-ones broadcast address:

% ping -i 5 -c 2
PING ( 56 data bytes
64 bytes from icmp_seq=0 ttl=64 time=0.392 ms
64 bytes from icmp_seq=0 ttl=255 time=3.053 ms (DUP!)
64 bytes from icmp_seq=0 ttl=64 time=8.685 ms (DUP!)
64 bytes from icmp_seq=1 ttl=64 time=0.319 ms

--- ping statistics ---
2 packets transmitted, 2 packets received, +2 duplicates, 0% packet loss
round-trip min/avg/max/stddev = 0.319/3.112/8.685/3.401 ms

This example shows less cruft. All the (DUP!)s are other machines and the local machine is easily identified as

share|improve this answer

You could try using dns-sd in order to perform Bonjour queries on the LAN.

share|improve this answer
I love that this answer is OS X specific and hooks into bonjour to avoid getting additional network details I wouldn't care about (in the context of this question). The specific command that worked for my needs was: dns-sd -B _ssh._tcp . – stevenhaddox Feb 18 '13 at 13:14

Maybe it's a bit of overkill but you could use nmap

share|improve this answer

A quick CLI one liner to step through /24 subnet ping each IP address. Quick and kind of dirty, but it works.

for (( x=1; x <= 254; x++ )); do ping -c 3 192.168.0.$x; done

Explanation: To change the range, change x=1 to x=130, or whatever you want to start at, and 254 to the end, say 135.

for (( x=130; x <= 135; x++ ));

ping -c 3 is send three pings. To change the number of pings change the 3 to something else, and to change the address range, change the 192.168.0 to something else.

do ping -c 30 10.10.0.$x;
share|improve this answer
you could simply use fping to do this : fping -ag – ıɾuǝʞ Aug 22 '13 at 13:58
This is anything but quick, for me... – Max Williams Aug 18 '15 at 15:38

Your Macs all have hostnames so you shouldn't need to know IP addresses. Instead you'll just use the hostname.

The hostnames are based on whatever name you've given the computer. So if the computer is named "Jon's Mac" the hostname you'll use is something like "jons-mac.local".

$ ssh jons-mac.local

If you don't already know your computers' hostnames then you can find out a computer's hostnames in the sharing preferences on that computer, or you can find out the hostnames of other computers on the network using the dns-sd command. This command uses Bonjour to let you browse network services; you'll only find computers that are actually advertising some network service (which, by and large, are the only ones you care about).

If you want to connect to some computer providing ssh, you can find the available computers using:

dns-sd -B _ssh._tcp .

In general you can search for hosts providing particular services using the service names:

The Bonjour protocol also provides the ability to browse for all services, not just particular ones. You can do this by browsing for the special service _services._dns-sd._udp

dns-sd -B _services._dns-sd._udp .
share|improve this answer

If you know the name of the other computers in the LAN, the simplest way is to ping them:

$ ping foobar

Pinging foobar.lan [] with 32 bytes of data:

Reply from bytes=32 time<1ms TTL=64
Reply from bytes=32 time<1ms TTL=64

This may depend on your local router or DHCP server. If the bare hostname doesn't work, try appending .local (ie, ping hostname.local).

Obviously this doesn't work well for large LANs or people with poor memories.

share|improve this answer

If you're using Macs, (assuming 10.5 or greater,) just enable VNC for desktop access and use

It's a really nice little utility that gives you exactly what you need, really quickly. The only thing is that you would have to go farther than SSH.

share|improve this answer

For Windows:

1) Write: for /L %I in (1,1,254) DO ping -w 30 -n 1 168.29.0.%I This will ping all addresses in your local network

2) Then write: arp -a This will give you all addresses that answered

share|improve this answer
Of course it depends on your local network address.In my case it is Yours might be something like – Chavdar Mar 28 '14 at 13:51
Your answer is based on Windows while the OP stated he is using a Mac. Can you edit your question to take this into account or state if your solution would work on a Mac. – Matthew Williams Mar 28 '14 at 14:04
Every MAC user has a Windows OS sitting around... You cannot live without it... :D – user2173353 Apr 2 '15 at 15:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .