Best timing options when scanning a large number of IPs

[Erik Tews <erik () debian franken de>]

Hi

I am going to scan a large number of ip adresses for a single open tcp
port. I am only instrested in knowing which one of them got this single
port open.

I got a fast network connection (100 Mbit to the next ip exchange) and I
am not worried if I miss some systems. If I got 90% of all hosts, which
got this port open, it would be still good.

What options should I use for nmap? I specified -T5 for very angressive
timing. What are good values for all the --min* and --max* options?

I would like to use 10 or 20 Mbit bandwidth for scanning.


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org