RE: Advice on Fastest NMAP Scan

["Andy Cuff" <AndyCuff () securitywizardry com>]

Jack,
If you are scanning networks where bandwidth is an issue you may wish to
consider the use of a packet shaping tool in addition to the nmap parameters
to restrict speed, this will prevent you DOSing yourself.  (been there, done
that, got shouted at)

   Regards
   -andy cuff
The Talisker Network Security Portal
http://securitywizardry.com 
Computer Network Defence Ltd

-----Original Message-----
From: Mogren, Jack L. [mailto:mogren () mayo edu] 
Sent: 26 October 2004 15:59
To: 'security-basics () securityfocus com'
Subject: Advice on Fastest NMAP Scan

 
Hi,
  I want to use NMAP to perform a network inventory on our network.  We have
over 75,000 networked devices.  The address ranges include one class B,
several class Cs, and the entire private address space.  That's a lot of
addresses to scan and I expect it to take a long time.  I'm looking for
advice on what options one might use to create the fastest NMAP scan.  I'm
only interested in finding our each devices OS and open services.  Here's
what I've come up with so far.

nmap -O -T4 -PE -F --osscan_limit -oX /home/security/test.xml -iL
/home/security/ip_addresses.txt

  Any comments or suggestions?

Also,  has anyone had luck importing a NMAP-generated XML file into MS
Access?  When I do so, it creates the tables, but the fields are blank.  No
data.

Thanks,

Jack Mogren
Mayo Clinic
Foundation Information Security Office
 

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.782 / Virus Database: 528 - Release Date: 22/10/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.782 / Virus Database: 528 - Release Date: 22/10/2004