Docs / Network Scanning

Network Scanning

How the 5-phase discovery engine finds and identifies every device on the network.

Overview

When you click Scan Network, NetMap Pro runs five discovery passes in sequence. Each phase uses a different protocol to find devices that might be invisible to the others. The result is a comprehensive device list with manufacturer identification — not just a list of IP addresses.

How long does it take? A typical /24 subnet (254 addresses) completes in 15–45 seconds. The ARP/ping phase is fastest (a few seconds); SSDP, mDNS, and HTTP each add a few more seconds as they wait for device responses.

The 5 Phases

Phase 1: ARP / Ping Sweep

NetMap Pro sends ARP requests (on the local subnet) and ICMP ping packets to every address in the target range. This is the broadest and fastest scan — it finds any device that responds to basic network traffic. Most wired devices respond to ARP even if they block ping.

Phase 2: SSDP / UPnP Discovery

Sends a multicast SSDP (Simple Service Discovery Protocol) query. Devices that support UPnP respond with their service descriptions, which often include the device model, manufacturer, and friendly name.

Phase 3: mDNS / Bonjour

Queries the multicast DNS responder on the network. Apple devices, printers, Chromecasts, and many IoT devices advertise themselves via mDNS (also known as Bonjour or Avahi).

Phase 4: OUI Manufacturer Lookup

Every network adapter has a MAC address. The first three bytes (the OUI — Organizationally Unique Identifier) identify the manufacturer. NetMap Pro checks each MAC against a database of 500+ manufacturer prefixes to identify the device brand.

Phase 5: HTTP Probe

Attempts an HTTP connection to discovered devices on common ports (80, 443, 8080). Many network devices serve a web management interface that returns identifying headers or page titles. This data helps identify the device when OUI alone isn't specific enough.

Scan Tips

Use a wired connection when possible. ARP discovery is faster and more reliable over Ethernet than Wi-Fi, especially on large networks.
Make sure devices are powered on. The scanner can only discover devices that are actively on the network. For devices that aren't powered on yet, use the Phone Companion to capture their MAC addresses from the label.

Understanding Scan Results

After the scan completes, the Devices tab shows a table with every discovered device. Each row includes:

Column Description
NameEditable device name — click to rename (e.g., "MBR Camera 1")
IP AddressThe device's current IP on the network
MAC AddressThe hardware address used for DHCP reservations
ManufacturerIdentified via OUI lookup (e.g., "Crestron," "Sonos," "Axis")
TypeDevice category — set this to get IP range suggestions

Click any device row to expand it and edit all fields including location, notes, and reserved IP. Use Copy IP / Copy MAC buttons for quick programming and documentation tasks.

Re-Scanning

You can run additional scans at any time. New devices are added to the list, and existing devices are updated with fresh data. Devices you've already named and categorized keep their labels — the scan only updates network-level fields (IP, MAC, manufacturer).

Troubleshooting

Scan finds no devices

Scan misses some devices

For more troubleshooting, see the Troubleshooting & FAQ page.

Next Steps

After scanning, you'll typically:

← Back to Documentation