12 Best Ping Sweep Tools and Software for 2023

A ping sweep is a simple network scanning technique that returns a range of active and inactive IP addresses on your network.

It’s useful for; identifying active devices on your network, ensuring devices are functioning correctly and crucially detecting unrecognized devices which may be nefarious and require further investigation.

A ping involves a packet of data being sent to a specific IP address (known as an echo request), if the device is active and healthy it will respond (known as an echo reply) and likely provide additional information that might help diagnose any network issues.

A ping sweep (also known as an ICMP sweep) follows the same process but involves sending multiple requests to multiple addresses at one time. This is more complex and is why a good ping sweep tool is essential for any network admin.

Here’s our list of the twelve best ping sweep tools available today:

1. SolarWinds Switch Port Mapper with Engineer’s Toolset EDITOR’S CHOICE – A network discovery tool lets you scan a range of IP addresses to identify free addresses and those that are in use. It also lets you perform reverse DNS lookups. The Switch Port Mapper tool is part of the Engineers Toolset which also includes a wide range of essential networking tools. Start a 14-day free trial.
2. SolarWinds IP Address Scanner (FREE TRIAL) – Part of the SolarWinds IP Address Manager.
3. Paessler PRTG (FREE TRIAL) – This tool performs a Ping sweep recursively as part of its network discovery routines
4. Zenmap – A free graphical interface for the Nmap network discovery and mapping system that runs on Linux, Mac OS, Unix, and Windows.
5. fping – A command-line Ping tool for Linux that can operate on ranges of IP addresses.
6. Network Pinger – A free Ping tool for Windows that includes Ping sweep capabilities.
7. hping – A free command-line Ping tool for Linux, Unix, and Mac OS and Windows.
8. Angry IP Scanner – A free network analysis tool for Windows, Linux, and Unix.
9. Advanced IP Scanner – A free network address scanner for Windows that has more than 30 million users.
10. NetScan Tools Basic Edition – A free ad-supported bundle of tools for Windows that includes a Ping sweep.
11. Pinkie – A free network analysis kit for Windows that includes a Ping sweep.
12. Mitec Network Scanner – A free network analysis toolkit for Windows and Windows Server that includes a Ping sweep feature.

The Best Ping Sweep Tools

1. SolarWinds Switch Port Mapper with Engineer’s Toolset (FREE TRIAL)

SolarWinds is a leading network software producer and the Switch Port Mapper tool is part of one of the company’s network management packages. The Engineer’s Toolset contains more than 60 tools for monitoring and managing a network and this pack includes the Switch Port Mapper and Ping Sweep.

Key Features:

• On-demand sweep
• Checks a range of IP addresses
• Exportable results
• Port activity
• Latency

The interface is very straightforward; just enter a range of IP address addresses to scan. You can specify a broad range if you are unsure of the total scope of addresses in use. By feeding in a text file with a list of IP addresses, you can extract a list of all the IP Addresses that have been allocated from a DHCP server.

Once you launch the search, the tool lists all of the active IP addresses it finds on the network. The sweep results can be exported as a text file, a CSV file, XML file, or an HTML page. With this, you can import the list into a spreadsheet and compare it to the list from the DHCP server. Subtracting the Ping Sweep results from your DHCP results will give you a list of abandoned IP addresses that you can restore to the pool of available addresses in your DHCP server.

The Switch Port Mapper results show the time it took for each host to respond. The response time highlights traffic bottlenecks on your network or where individual pieces of equipment are experiencing performance problems. You also get the hostname of each detected device. Exporting the single IP addresses and hostnames enables you to compare the current list of hostnames to records from your DNS server and make sure the server’s report reflects the actual address status of your network.

Unfortunately, it isn’t possible to buy the advanced Switch Port Mapper tool alone. SolarWinds does offer a 14-day free trial of the tool. SolarWinds Switch Port Mapper with Engineer’s Toolset can be installed on Windows Server.

2. SolarWinds IP Address Scanner (FREE TRIAL)

IP address scanning is an essential element of any IP Address Manager (IPAM). So, this tool is included in our list so that you can consider the next level up from a simple Ping sweep for your network’s address management system. If you have a large network, you will particularly need to think about installing a full IPAM because a pure Ping sweep can be very slow on large networks.

Key Features:

• Runs constantly
• Integrated into IPAM
• DDI solution
• Spots abandoned addresses

The SolarWinds IP Address Scanner is part of the company’s IP Address Manager suite. The tool combines ICMP (Ping) and SNMP strategies to maintain a clean list of available IP addresses. The tool can be set to run automatically in the background so you won’t have to wait while the process finishes. The scanner will also update your address management pool of available IP addresses without manual intervention. The entire IPAM suite is able to work with IPv4 and IPv6 addressing.

The dashboard for the IPAM includes live reports on all currently active IP addresses, mapping them to the hostnames registered in your DNS server. This feature creates a full DDI solution because it prevents your DHCP server from reissuing active addresses and also reconciles to the DNS records, ensuring that dead addresses do not remain in the hostname mappings.

The screens for the IP Address Manager are written to a common platform used by SolarWinds, which is called Orion. This unifying platform means that you will be able to integrate the IPAM module with other SolarWinds products. The tool installs on Windows Server environments. Although this IP Scanner is not permanently free to use, you can get it on a 30-day free trial.

SolarWinds IP Address Scanner Download 30-day FREE Trial

3. Paessler PRTG (FREE TRIAL)

Paessler PRTG is a comprehensive system monitoring tool that uses a range of techniques to map networks and the devices connected to them. PRTG is also able to monitor the network performance of applications and web services. The visibility of the tool extends to online services and remote sites.

Key Features:

• Ping-based device discovery
• Connectivity checks
• Recursive Ping

Among the many protocols and systems that PRTG uses, Ping is one of the most central. The PRTG installation ends with a discovery phase. That tracks down every device connected to the network and logs them in a register. The inventory also allows the PRTG software to compile a network map that shows the connections between devices. That system probe is performed with a Ping sweep.

Standard Ping contacts one IP address. It is a system command that is available to any operating system that incorporates network services. If your computer is connected to a network, you can go to the command line and issue a Ping query. The Ping sweep technique is an adaptation of that tool. To get in touch with every node on the network, Paessler put a Ping command in a looped routine. The Ping sensor works sequentially through every feasible network address and issues a Ping to that destination. If the sensor gets a response, that address is in use and further enquiries can derive detailed information about the device that it represents.

The Ping sweep is a starting point of discovery. Other tools add in the details of each device’s characteristics. The SNMP system gives a lot of detail on all network devices and their current statuses. So, The Paessler Ping sweep works in concert with other protocols and utilities to map your network. The detection cycle continues while the monitoring software is active. This operation keeps the device register up to date and reorganizes the network map should any devices be removed, added, moved, or changed.

Paessler PRTG can be installed on Windows Server or you can opt to get it as a cloud-based service. The system is implemented as a group of sensors. One of those is the Ping sensor. You can get Paessler PRTG for free if you implement up to 100 sensors. You have to pay if you need more sensors. Paessler offers a 30-day free trial with unlimited sensors, so you can try out the system before paying for it.

Paessler PRTG Download 30-day FREE Trial

4. Zenmap

Nmap is a free set of network system tools that execute from the command line. Zenmap is a GUI version of Nmap, and so it is easier to use. The software can be installed on Linux, Mac OS, Unix, and Windows.

Key Features:

• Free to use
• Device discovery
• Maps network

The scan format is dictated by a Profile that details search parameters. The Zenmap GUI includes a number of set profiles, but you can create your own scan specification by editing an existing profile and saving it as a new version. Zenmap can perform scans with TCP as well as with Ping. The output of a scan will have a different layout depending on the profile. You can get the IP addresses of active hosts, plus the hostname of each device. The scan can be changed to use TCP and show the open ports on each computer or router.

The raw output of the underlying Nmap process is shown in the first tab of the interface. These details are difficult to read, but all subsequent tabs in the viewer interpret the data into easy-to-read records. One of the display formats is a Topology Mapper, which gives a graphical representation of all the links in your network.

Zenmap results can be stored as XML files.

5. fping

fping is a command-line tool for Linux systems. This free software requires an IP address range as a parameter in order to start the sweep. It is possible to enter this rage in CIDR notation with an address and mask length combination, such as 192.168.1.0/24. Alternatively, you can list IP Addresses in a file and pipe it into the command. You can get a report on IP address allocation in text format from your DHCP server and feed that into fping. As with any Linux command-line tool, you can pipe the output to a text file.

Key Features:

• Linux command line tool
• Ping a range of addresses
• On-demand utility

Switches in the utility allow you to limit the sweep to just IPv4 or IPv6 addresses. You can specify that only active hosts appear in the list, or you can ask to see all IP addresses in the range with inactive addresses labeled as unreachable. Another feature of the tool is the ability to link the output to DNS records. This displays the hostname for encountered IP addresses. If the DNS entry looks wrong or if a record is missing a hostname, you can spot DNS problems.

This is an on-demand tool, but you could schedule runs by putting the command in a batch file and running it as a cron job.

6. Network Pinger

The name of this tool tells you that ping lies at the core of its methodology. Network Pinger is a free tool that runs on Windows. The scanner requires an address range as input, and this can be expressed as a subnet in CIDR notation. The program pings each address in the sequence and reports on the responses.

Key Features:

• Free tool for Windows
• Scans an address range
• Also, Traceroute and switch port mapper

The interface shows the output of the serial ping as it progresses through the IP address range. Graphical displays in the dashboard show the response rate encountered with each ping execution. A pie chart shows the percentages of addresses that could be reached and those that could not. The graphics in this ping sweep software are a really nice touch and they make it very easy to quickly sense the state of the network.

Other functions of Network Pinger let you issue a ping to a single address. A Traceroute function and a switch port mapper come built-in. Planning features include an IP calculator and statistical analysis reports. The Network Pinger contains many useful diagnostic tools that help you investigate the health of your network and find solutions to communication problems.

7. hping

hping is a command-line utility, so it doesn’t have the sophistication of GUI-based interfaces that have become common in modern network management tools. The format of this free tool will appeal to longer-serving network administrators used to using commands such as Ping and Traceroute. The latest version of this software is hping3. The tool is free to use. hping3 installs on Linux, Unix, and Mac OS and Windows.

Key Features:

• Free to use
• Scans an address range
• Also Traceroute

Ping is a function specified in the Internet Control Message Protocol. It operates at the Internet Layer of the TCP/IP stack. It doesn’t have port visibility, an addressing system employed in the higher Transport Layer. hping sends out serial ping requests to each IP address in a given range. TCP and UDP messaging capabilities let you test the ports on your computers and routers. It also incorporates a Traceroute implementation.

As a command-line utility, you can pipe the output to a file for analysis. Many commands are included in this tool, such as the ability to translate hostnames to IP addresses and test firewalls.

hping is of interest to hackers because it can help gather information on a target computer and be used to launch a denial of service attack. So, hping has a bit of a bad boy reputation. However, this doesn’t mean that you shouldn’t use it to discover information about your own network and communication devices.

8. Angry IP Scanner

Angry IP Scanner is a very popular ping sweep tool frequently recommended by professionals in comment sections and message boards. Possibly one of the reasons for its popularity could be the format of its interface. The dashboard gives straightforward lists of results, similar to the no-nonsense presentation of command-line utilities that highly experienced techies prefer, combined with the window-based fonts of GUI systems that make the output easier to read.

Key Features:

• Free to use
• Scans an address range
• Port scanner

This free network analysis tool can be installed on Windows, Linux, and Unix. The scanner sweeps a given range of IP addresses that can be in CIDR notation format. It can check random IP addresses or a non-consecutive list given as an input file. Output can be directed to CSV, TXT, XML or IP-Port format files.

The standard ping sweep output shows each IP address in the requested scan range, whether they were contactable or not. Missing addresses are indicated by the absence of a ping round trip time for that record.

A DNS resolution function shows the hostname for a requested IP address if it can find it. The absence of a hostname for a record should raise alarms if that IP address was contactable because either your DNS records are out of date or you have an intruder on the network. The ping sweep results show whether each host has an open web host port, and if so, you will see the name of the web server system. You can get the MAC address of each host displayed for its IP address ping record.

The presence of hostname resolution and port activity details shows the ping sweep function doesn’t just employ ICMP ping commands. Alternative functions of this tool include computer and router port scanning.

9. Advanced IP Scanner

Advanced IP Scanner can be installed on Windows 10 and it is free to use. You need to enter a scan IP address range before launching the sweep. You can also specify a list of IP addresses to check. The list has to originate in an XML file, which you first load it into a Favorites list. The results list expands each record to reveal the shared folders available on every detected host. The headline record for each IP address shows the hostname for that node, its MAC address, and the manufacturer of that device.

Key Features:

• Free for Windows
• Device details
• DNS resolution

Once the utility has identified each live node on the network, you can access that computer and execute commands on it. You can also turn on computers on the network, put them into standby mode, or turn them off.  A range of addresses to scan is required before launching the sweep. The output from a scan can be written to CSV files. Import the data into a spreadsheet and compare the list of encountered IP addresses with the records from your DHCP server to spot abandoned IP addresses.

This is a very simple tool, but its focus on the most important information that network administrators need from a ping scan explains its popularity. The website for Advanced IP Scanner states that the tool has been downloaded by 30 million users.

10. NetScan Tools Basic Edition

NetScan Tools comes in two versions. One of these is a paid version called NetScan Tools Pro, and the other is a free system called NetScan Tools Basic. The ad-supported Basic edition has a reduced set of features compared to the Pro package. The Ping Sweep tool is included in the Basic Edition.

Key Features:

• Free and paid versions
• DNS resolution
• Address range scan

The ping sweep utility, called Ping Scan, requires an IP address range as inputs to the search. Once the sweep is launched, the tool attempts to contact each of the addresses in the given range. The results for each IP address show the response time from the ping round trip and a status comment. You can exclude non-responding addresses and include the hostname for each address in the results.

The absence of a hostname for an IP address that was contacted points to a possible problem with the networks DNS server. Another tool in the NetScan Tools Basic package specifically queries the system DNS to check for errors. You can print or copy the sweep results and save them to a file.

The Pro edition of NetScan Tools has more utilities. You can buy it for $249 for one license and up to $2,255 for five licenses. Both NetScan Tools Basic and NetScan Tools Pro are designed to run on Windows 7, 8, and 10.

11. Pinkie

Pinkie is a handy free tool with a lot of other utilities in addition to its Ping Sweep. This set of tools is only available for Windows. You can download Pinkie here.

Key Features:

• Free for Windows
• Identifies abandoned addresses
• Sweeps entire network

Start by specifying a starting address and the number of hosts that should be scanned. You can choose to only include live hosts in the results. In that case, the sweep will continue either until the number of active IP addresses has been encountered or until all of the network has been scanned. If you don’t specify the live host requirement, the tool will include abandoned addresses in the sweep host count.

The tool works quickly and lists each encountered live IP address, or every address in sequence until the maximum number of hosts has been reached. Each record contains the hostname and the response time, which is the ping round trip time.

You can save the results to a file by copying it to the clipboard. You then paste the records out of the clipboard into a file. This enables you to reconcile the results with a record extract from your DHCP server. The Pinkie bundle includes a straightforward Ping, a Traceroute, a port scanner, and a subnet calculator. The utility also includes a TFTP server.

12. Mitec Network Scanner

The Mitec Network Scanner is a system administration tool that includes a ping sweep utility. The free tool can be installed on Windows 7, 8, and 10 and Windows Server 2008, 2008 R2, 2012, 2012 R2 and 2016.

Key Features:

• Free Windows tool
• Scans a given address range
• Whois and DNS resolution

The ping sweep feature forms the heart of the Network Scanner. It gathers a list of live IP addresses within a given range. For each encountered address, you see that device’s MAC address, hostname, and response time, which represents the ping round trip time.

Other additional features in the tool let you explore each discovered device to deeper detail. This includes an inventory of the ports on the device and the manufacturer of that piece of equipment.

The Network Scanner is a useful tool that includes a Whois function and DNS resolution.

About Ping

Ping is a function of the Internet Control Message Protocol. It is available as a command-line utility on any computer connected to a network no matter what the operating system. Ping is so universal that it is a basic component of any network administrator’s toolkit.

Echo request and response

The classic ping command relies on a packet type that is specified in the ICMP definition. This is the “echo request,” which is replied to with an “echo response.” In order to work, Ping needs an address to which the echo request should be sent. That input value can be expressed as an IP address or as a host or domain name.

Entering an IP address for the destination gets you a direct RTT result. If you enter a hostname for a computer on the local network, the Ping routine will first have to go to the local DNS server to get the IP address that is connected to that name. If you are testing a connection across the internet, entering a domain name for the destination will force the Ping program to go and fetch the IP address of that domain’s web server before it can send the echo request. Issuing a ping with the IP address and then with the hostname or domain name will show you the delays caused by the DNS reference process.

Command-line utilities are not so popular these days. Many GUI adaptations of ping have been created by both individuals and software houses. Ping has a list of switches that alter its behavior. Each run of ping can only contact one address. The concept of a ping sweep can be implemented by a simple script that works through a list of addresses and issues the ping command for each.

The underlying functions of the software in this list are all variations of a script with a recursive loop, calling ping over and over again as it combs through the addresses in a given list.

Despite being a very old and very simple tool, Ping is very powerful. For example, simply reporting on a response from an address means that ping can be manipulated to detect IP addresses that are actually in use on a network. This is an essential requirement of any IP address management system.

The response time output field of ping is very useful. In a ping sweep, a troubled device shows a very long response time. If you test all of the devices on your network through a ping sweep, most devices will respond within a very close range of times. One or two high numbers in that Response Time column will instantly show when a device is overloaded or damaged.

Although ping is a straightforward and free utility, the developers who create variants such as a ping sweep deserve respect. The addition of graphical outputs, such a response timeline graphs, is also nice to see.

About Traceroute

Traceroute is a very similar networking tool to ping, but Traceroute uses UDP packets. Traceroute sends out a series of packets with the “time to live” field steadily increasing.

Time to live is usually abbreviated as TTL. It doesn’t contain a time value. Instead, it contains the maximum number of routers that the packet can pass through. When the packet reaches a router, that device reduces the TTL by one before it forwards it on to a neighboring router. If a router receives a packet that has a TTL of zero, it does not pass it on, which means that it drops it.

The ICMP protocol, which ping uses, includes an error messaging process that reports back on failure, giving the address of the device that reported the error. Traceroute uses this facility to log the address of the router that dropped the packet. By sending out packets with increasingly higher TTL values, the utility can eventually record the addresses of all the routers between the computer running the command and a given destination.

When used on a network, Traceroute can build up a map of all the routers on the LAN and how they link to each other and all of the other devices on the network. It would be possible to write a recursive routine including a Traceroute execution within the loop, giving an IP address as a parameter. The loop would cycle through a range of standard network IP addresses and report back on the route through the LAN to reach it.

On Unix-like systems, including Linux flavors and Mac OS, the command for Traceroute is traceroute. On Windows, the command is tracert.

A combination of Ping and Traceroute enables you to build a map of your network. Some of the ping sweep utilities listed in this guide use this exact combination to provide graphical representations of the network under investigation.

Related post: What is Matt’s TraceRoute?

Port mappers

Port mapping tools are also very useful. These use both TCP and UDP to check whether each port on a device is open.

Ping operates at the Internet Layer of the TCP/IP protocol stack, so it has no concept of port numbers. If you get a ping sweep tool that reports on the ports on a device as well as the device’s status, then that ping sweep has been performed with a combination of protocols that add to the small amount of information available to ping.

Unfortunately, knowledge of which ports are open is a security weakness and so some system administrators block their gateway device from sending ICMP each response in order to reduce the risks created by port scans.

Many operating systems prevent access to ICMP functionality to users who don’t have admin privileges. In these cases, it is common to use a higher-level version of the ICMP echo request, by sending a UDP datagram instead. This is what is often called the “UDP packet Ping,” which operates at the Transport Layer.

Ping sweep alternatives

A ping sweep utility can also be called an IP address tracker. Both of these types of software perform the same task: identify all of the IP addresses in use on a network. If you need more detailed information on IP address usage on your network, step up to a more complex tool. In this instance, the tool you seek is an IP address manager.

Ping sweep operations

A ping sweep is more appropriate for a small network. As your network grows, you may find that the manual steps needed to analyze data from a ping sweep takes up too much time. If this is the case, then your network is probably too big for a ping sweep to be a time-saving utility, and you should investigate IP address managers instead.

Do you perform ping sweeps on your network? Which tool do you use? Have you compared the ping sweep with a full IP address manager? Which do you prefer? Leave a message in the Comments section below and let us know your experience.

Ping sweep FAQs