A systems engineer was configuring a small, single-board device running Linux when the device lost power during an outage. The device was running an SSH server and was set up to obtain an IP address v

Running 'arp -a' (or 'ip neigh') displays the ARP cache, which lists all IP-to-MAC address mappings the local system has learned on the network segment. Because the first three octets of a MAC address encode the manufacturer's Organizationally Unique Identifier (OUI), the engineer can filter the output for the known vendor prefix and directly read off the device's current IP address - no hostname needed.

whois queries public registration databases for domain names or IP address block ownership and returns no information about devices present on a local network segment.

nmap can scan a network for hosts but requires specifying a subnet range and the results are less targeted than filtering a pre-populated ARP table by MAC OUI.

ping requires a known IP address or hostname as its argument, which is exactly the information the engineer is trying to discover.

netcat is a utility for reading from and writing to network connections and does not perform host discovery or reveal IP-to-MAC mappings.