opnsense_search_neighbors
Search ARP and NDP neighbor tables to map IP addresses to MAC addresses, interfaces, and hostnames. Identify unknown hosts on your network by filtering by IP, MAC, or interface.
Instructions
Search the ARP (IPv4) and NDP (IPv6) neighbour tables to find which device holds an address, or which addresses a MAC has.
This is the fastest way to identify an unknown host on a segment. Entries only exist for devices that have communicated recently, so an absent entry does not prove a device is offline. For a fuller picture of a specific segment, pair this with opnsense_list_dhcp_leases.
Args: params (SearchNeighboursInput): Validated input containing: - search (str): Substring on IP, MAC, hostname or interface (default: "") - family (str): "ipv4", "ipv6" or "both" (default: "ipv4") - resolve_hostnames (bool): Resolve names, slower (default: False) - limit (int): Max records, 1-200 (default: 25) - offset (int): Records to skip (default: 0) - response_format (ResponseFormat): 'markdown' or 'json'
Returns: str: Markdown table, or JSON with this schema: { "total": int, "count": int, "offset": int, "has_more": bool, "next_offset": int|null, "neighbors": [ {"ip": str, "mac": str, "intf": str, "hostname": str, "manufacturer": str, "expires": int, "family": "ipv4"|"ipv6"} ] }
Examples: - Use when: "What is 192.168.30.57?" -> search="192.168.30.57" - Use when: "Which IPs does this MAC hold?" -> search="a4:83:e7:11:22:33", family="both" - Don't use when: You want the full DHCP allocation (use opnsense_list_dhcp_leases)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| params | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |