zmap

Fast, open-source network scanner for Internet-wide surveys. tldr-pages

On several platforms

Several platforms

Scan a subnet or full IPv4 space for a specific TCP port (default: 80)

sudo zmap --target-ports port subnetIdentify

Scan specific ports or port ranges across a subnet

sudo zmap --target-ports port1,port2-port3,... subnetIdentify

Output results to a CSV file with custom fields

sudo zmap --output-file path/to/output_file.csv --output-fields "saddr,daddr,sport,dport" subnetIdentify

Limit the scan rate to a specific number of packets per second

sudo zmap --rate packets_per_second subnetIdentify

Simulate running zmap without sending packets

zmap --dryrun subnetIdentify

Exclude subnets using a blocklist file in CIDR notation

sudo zmap --blocklist-file path/to/blocklist.txt subnetIdentify

Set a specific source IP for scan packets

sudo zmap --source-ip source_ip subnetIdentify

Cap the number/percentage of targets to probe (e.g. 1000 IP/port pairs)

sudo zmap --target-ports port1,port2-port3 --max-targets 1000 subnetIdentify