Security Basics mailing list archives

Re: Advice on Fastest NMAP Scan


From: "Gabriel Orozco" <gabriel_orozco () mx sumida com>
Date: Tue, 26 Oct 2004 14:53:02 -0500

Well

I would instead use one machine for each segment to scan it's own segment,
and later merge all the data...

at least, divide your network on chunks, so you can get final results
sooner.


Regards

Gabriel Orozco
SAM/IT

----- Original Message -----
From: "Mogren, Jack L." <mogren () mayo edu>
To: <security-basics () securityfocus com>
Sent: Tuesday, October 26, 2004 9:58 AM
Subject: Advice on Fastest NMAP Scan



Hi,
  I want to use NMAP to perform a network inventory on our network.  We
have over 75,000 networked devices.  The address ranges include one class B,
several class Cs, and the entire private address space.  That's a lot of
addresses to scan and I expect it to take a long time.  I'm looking for
advice on what options one might use to create the fastest NMAP scan.  I'm
only interested in finding our each devices OS and open services.  Here's
what I've come up with so far.

nmap -O -T4 -PE -F --osscan_limit -oX /home/security/test.xml -iL
/home/security/ip_addresses.txt

  Any comments or suggestions?

Also,  has anyone had luck importing a NMAP-generated XML file into MS
Access?  When I do so, it creates the tables, but the fields are blank.  No
data.

Thanks,

Jack Mogren
Mayo Clinic
Foundation Information Security Office




Current thread: