RE: Nmap discovery - specifying port ranges?

[<peter.schaub () thomson com>]

C:\>nmap -sP -p 10-20

Starting Nmap 4.20 ( http://insecure.org )
You cannot use -F (fast scan) or -p (explicit port selection) with PING
scan or LIST scan
QUITTING!

The other commands for a port range: #nmap -PS -p 10-20 IP   is not the
exact same as the -sP PING scan, but should give you what you need.

 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of spencerforhire
Sent: Monday, September 17, 2007 11:00
To: security-basics () securityfocus com
Subject: Nmap discovery - specifying port ranges?

I've found Nmap ping sweeps (TCP SYN) very useful to discover machines
that are up, but specifying port ranges doesn't seem to work.  When I
try "-PS1-1024" I get:

"Bogus character in supposed number-list string.  Example of proper
form: "20,80,65532""

Does anyone know if there is a way to specify port ranges w/ the ping
option?

Also, anyone know what the status of the "top ports" project
(http://seclists.org/nmap-dev/2006/q3/0138.html) is?

Thanks!