Re: Speeding up single ports scans over large networks

[Fyodor <fyodor () insecure org>]

On Thu, Sep 18, 2003 at 06:29:45PM -0700, Fyodor wrote:
> On Fri, Sep 19, 2003 at 12:35:51AM +0100, testic wrote:
>
> nmap -PS[portno] -sS[portno] -T4 -n [network addresses]

My bad ... of course -sS doesn't take an argument.  I meant "-sS -p
[portno]".  Here is a real example of scanning 4400 IPs for web
servers in under a minute:

nmap -PS80 -sS -p80 -oA [filename] [ Netblocks ]
[ ... ]
Interesting ports on STAGING2.PLAYBOY.COM (209.247.228.141):
Port       State       Service
80/tcp     open        http

The 1 scanned port on mailhost-chi.playboy.com (209.247.228.143) is:
closed

Interesting ports on ads-chi.peiecommerce.com (209.247.228.145):
Port       State       Service
80/tcp     open        http
[...]
Nmap run completed -- 4397 IP addresses (50 hosts up) scanned in
59.196 seconds ]

Cheers,
-F


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).