Regardless of the network setup, I do know it's possible to find the hostnames of 69 devices on this network of 230 total devices, because Advanced IP Scanner does that. It's never returned zero hostnames when I've used it - which is where I'm at with the command line up to this point.

However, I've tried that Advanced IP Scanner program on dozens of networks and it always works pretty well. I don't know if I'm knowledgeable enough to dig into it that far. Where are your machine-names being identified? So I don't think that's really the solution I'm looking for. However, I did try using nbtstat with map, as per many of your suggestions (appreciated!) When I scan using nbtstat with map I only get about 30 hostnames in the output, where Advanced IP Scanner returns 69. So netbios only approaches won't work for me.

Sorry about that! I do actually have macOS, Windows, and Linux devices on my network. I realized that I only wrote Windows style hostnames in my example above, which may have confused some people. I'm on macOS, but ideally I'd like it to work on macOS and Linux.ĮDIT: I goofed. Here are some that I've tried: arp-scan -l -I Here is an example of the output that I'm looking for: Name IP Manufacturer MACĭESKTOP-DIA391V 192.168.1.101 Dell Inc. Or they return a list of all the devices, then you have to go through them and scan for the hostname one at a time. All of the stack overflow posts, and the like, that I've read have solutions to scan without returning the hostname. Strangely I haven't been able to find a decent solution for this. I'm looking for a similar scanner for the command line. For example, one network I recently scanned has 230 total devices, and Advanced IP Scanner returned hostnames for 69 of them. It's not perfect - it doesn't return hostnames for all devices, but it's pretty good, all the same. I've used this program a few times in the past, and it works quite well.

Ip advanced scanner linux