Fundamentals

How Apate finds every device on your network

Apate Security · October 2026 · 6 min read

"Show me everything on my network" sounds simple, but modern networks actively make it hard. Here is how Apate builds a complete picture - and why a device sometimes takes a moment to appear.

Active discovery: asking who's there

The fastest way to find devices is to ask. On your local subnet, Apate sends ARP requests and ICMP (ping) sweeps and notes who answers. For devices that ignore ping, it tries a light TCP check on common ports. This is ordinary, non-destructive network traffic - nothing is attacked or altered.

On a multi-homed PC (Ethernet plus Wi-Fi plus a VPN, say), Apate sweeps the subnet of every local adapter, not just the one that reaches the internet - which is what lets devices on a second segment show up on their own.

Passive discovery: listening for what announces itself

Many devices announce themselves without being asked. Phones, printers, speakers and TVs broadcast mDNS/Bonjour and SSDP; laptops and IoT send ARP and DHCP as they join. Apate listens for this chatter and adds those devices too - which is how it surfaces hosts that block active probes but still talk on the wire.

Live packet capture (the listening part) uses the free Npcap driver on Windows. Discovery and inventory still work without it; Npcap just unlocks the capture-based features.

Why some devices are hard to see

On a normal switched or Wi-Fi network, your PC mostly sees its own traffic plus broadcasts. To see another device's traffic directly, the PC has to be on its path - acting as the gateway or hotspot, or receiving a mirror/SPAN port. And a phone using MAC randomization will look like a new, unfamiliar device each time it rotates its address. Apate flags these cases rather than pretending the picture is always complete.

Staying current as things change

Devices come and go, and so do networks. Apate re-scans on a light, steady cadence so a device that wakes up appears on its own, and when you move to a different network it detects the change and re-discovers the new one automatically. Devices you've seen before are remembered and shown as offline until they reappear.

The result is a living map of your network rather than a one-time snapshot. See how it works, or try it free.

← All posts