Network Discovery

Network Discovery scans a range of your network, finds the devices that are actually there, makes a best guess at what each one is, and lets you add them to your inventory in a few clicks. It’s the fastest way to onboard a new site or fill in gaps in your existing inventory.

Network Discovery scanning a range, with live progress and fingerprinted results.

What you can scan

Open Discovery from the navigation and enter what you want to scan. GridNMS accepts several target formats:

Target type	Example	Use it for
Single IP	10.0.5.12	Checking one specific host.
CIDR range	10.0.5.0/24	A whole subnet at once.
Dash range	10.0.5.1-10.0.5.50	An arbitrary span of addresses.

Pick the collector that should run the scan — it must be able to reach the target network. Then start the scan.

Caution

A collector can only scan networks it has been assigned. If a range you enter falls outside a collector’s allowed networks, that part of the scan is skipped. This is a safety boundary that keeps scans from reaching networks they shouldn’t.

What discovery probes

For each address in range, GridNMS checks a series of signals to decide whether something is there and what it might be:

• Ping (ICMP) — is the host alive and reachable?
• Common TCP ports — are well-known ports open (for example SSH, HTTPS, SNMP-adjacent management ports)?
• Service probes — lightweight checks against responding ports to identify the service.
• Reverse DNS — does the address resolve to a hostname? If so, that name is suggested for the device.

The combination of these signals lets discovery distinguish a live router from an unused address, and a switch from a server.

Aggressiveness profiles

Discovery offers three profiles that trade thoroughness against speed and network load. Pick one with the Low / Medium / High selector before scanning.

Profile	What it does	When to use it
Low	Minimal probing — mostly ping and a few key ports. Fast and gentle.	Large ranges, sensitive networks, or a quick “what’s alive?” sweep.
Medium	A balanced set of port and service probes. The default for most scans.	Day-to-day discovery of a subnet or site.
High	The most thorough probing across more ports and services. Slower and chattier.	A new site you’re onboarding from scratch, where you want the richest fingerprints.

Tip

Start with Medium. Only reach for High when you’re onboarding a network you don’t know well and want the best possible device-type guesses. Use Low on big ranges or anywhere you want to keep extra traffic to a minimum.

Watching progress

Once a scan starts, the page shows live progress — how many addresses have been checked, how many responded, and which devices have been fingerprinted so far. Results stream in as they’re found, so you don’t have to wait for the whole range to finish before reviewing what’s already been discovered.

You can stop a scan early if you’ve already found what you were looking for.

Device fingerprinting

For each responding host, discovery makes a best guess at the vendor and device type based on the signals it gathered. These guesses pre-fill the device’s suggested class (Router, Switch, Firewall, Server, and so on) and, where reverse DNS resolved, its suggested name.

Note

Fingerprints are educated guesses, not guarantees. Always glance over the suggested class and name before adding — you can correct any of them, either during the add step or later from the device’s detail page.

Reviewing and adding results

When the scan finishes (or as results arrive), each discovered host appears in a results table with its address, suggested name, suggested class, and the signals that were found. GridNMS marks which hosts are new (not yet in your inventory) versus already known.

To bring new hosts into inventory:

1. Review the results and uncheck anything you don’t want to add (unused addresses, third-party gear you don’t manage, and so on).
2. Adjust the suggested class or name for any host if the fingerprint guessed wrong.
3. Assign the selected hosts to a site and, if needed, a collector.
4. Click Add selected to create the devices in bulk.

The new devices appear immediately in your device list, and GridNMS begins monitoring them shortly after — though you may still need to add SNMP or SSH credentials before they report detailed metrics.

A typical workflow

1. Enter the subnet for a new site, e.g. 10.20.0.0/24.
2. Choose the collector at that site and set the profile to High for the first sweep.
3. Start the scan and watch results stream in.
4. Review the fingerprints, correct any obvious mis-classifications, and uncheck addresses you don’t manage.
5. Assign everything to the correct site and bulk-add.
6. Add credentials and let monitoring fill in the detail.

Where to go next

• Manage what you discovered in Devices & Inventory.
• See how the new devices connect in Topology & Neighbors.
• Learn how collectors reach your networks in Collectors.