The arp command is used on Windows systems at the command line. To see how this command is used on Kali Linux systems, please refer to this page.

Displays and modifies the IP-to-Physical address translation tables used by address resolution protocol (ARP).


ARP -s inet_addr eth_addr [if_addr]
ARP -d inet_addr [if_addr]
ARP -a [inet_addr] [-N if_addr] [-v]

-aDisplays current ARP entries by interrogating the current protocol data. If inet_addr is specified, the IP and Physical addresses for only the specified computer are displayed. If more than one network interface uses ARP, entries for each ARP table are displayed.
-dDeletes the host specified by inet_addr. inet_addr may be wildcarded with * to delete all hosts.
-gSame as -a.
-N if_addrDisplays the ARP entries for the network interface specified by if_addr.
-sAdds the host and associates the Internet address inet_addr with the Physical address eth_addr. The Physical address is given as 6 hexadecimal bytes separated by hyphens. The entry is permanent.
-vDisplays current ARP entries in verbose mode. All invalid entries and entries on the loop-back interface will be shown.
eth_addr Specifies a physical address.
if_addr If present, this specifies the Internet address of the interface whose address translation table should be modified. If not present, the first applicable interface will be used.
inet_addrSpecifies an internet address.


arp -s 00-aa-00-62-c6-09Adds a static entry.
arp -aDisplays the arp table.

Back to Command Help page.