GUI¶

Workflow¶
- Pick an interface. The dropdown shows every NIC on your machine. Use the toggle to hide interfaces with no IP. Hit the ↻ button to re-scan after plugging or unplugging cables.
- Pick the protocol. LLDP is the universal choice (Aruba, HP, Juniper, Extreme, Mikrotik, Cisco). CDP is Cisco-only.
- Click Start. Most switches send a discovery packet every 30–60 seconds, so it usually takes a few seconds for the first frame to arrive.
- Read the result. Switch name, IP, port, VLAN, voice VLAN, MTU, and model populate the result card.
Privilege warnings¶
PortFinder shows a banner if it can't capture packets:
- macOS — click Install BPF Access once. The app installs a
LaunchDaemonthat makes/dev/bpf*readable for members of theaccess_bpfgroup, which Wireshark also uses. - Linux — install the
.debor.rpmpackage. The postinstall setsCAP_NET_RAWon the binary so it doesn't needsudo. - Windows — install Npcap with "Allow non-administrators to capture" enabled.
Sniff all interfaces¶
Selecting Sniff all Interfaces runs a capture on every non-loopback NIC in parallel and returns the first matching packet. Useful when you don't know which physical port is patched into the switch.