La commande arp-scan permet de retrouver les adresses MAC d'équipements sur le réseau.

Exemple :
| ========

arp-scan --interface eth0.11 10.xxx.xxx.xxx/23

Interface: eth0.11, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.8.1 with 512 hosts (http://www.nta-monitor.com/tools/arp-scan/)
10.xxx.xxx.xxx 00:50:56:xx:xx:xx VMware, Inc.
10.xxx.xxx.xxx 00:40:9d:xx:xx:xx DIGIBOARD, INC.
10.xxx.xxx.xxx 00:13:21:xx:xx:xx Hewlett Packard
10.xxx.xxx.xxx 00:03:64:xx:xx:xx Scenix Semiconductor, Inc.
10.xxx.xxx.xxx 00:e0:86:xx:xx:xx CYBEX COMPUTER
10.xxx.xxx.xxx bc:30:5b:xx:xx:xx Dell Inc.
(...)
| ========