jump to navigation

Using NMAP for Ping Sweep and OS Detection August 30, 2010

Posted by networknuts in Uncategorized.
Tags: , , , , , , , , , , , , , , , , ,
trackback
Ping Sweeping is the process of pinging numerous hosts. In the case of a large set of target IP addresses, one must perform a ping sweep to determine alive hosts that respond to ICMP echo requests. This information can be very useful for a administrator checking his network status.
We can use “nmap” for this purpose.
Step #1. Install NMAP
You can either use the Internet repositories for this purpose and use:
yum install nmap
or you can manuall download the nmap package from this link – http://nmap.org/download.html
Step #2.Use nmap for Ping Sweep
nmap -sP 172.24.0.*
In this case I am trying to use ping-sweep to scan my whole network to find out which machines are LIVE and KICKING right now.
Here is what I get from this simple command.  :P

Ping Sweep in action

NMAP is so wonderful tool in your hands that it can be used for many purposes.
One more very simple, very interesting and very important job that nmap can perform is that it can also give you the OS details of your machines running within your domain.
Using nmap for OS detection:
nmap -O 172.24.0.*
Just give this command and see ALL your machines telling their OS’s to you.
Below is what I get !!

OS Detection using nmap

To watch the video of this post on Network NUTS YouTube channel – http://www.youtube.com/watch?v=WMPr4dvdo74
God Bless !!
Enjoy your EDGE !!

Comments»

1. bharathvn - October 23, 2010

Thanks, good tips

Keep it up

2. Codemaster - October 23, 2010

Hello,

Thanks a lot for this script, that is really exciting stuff!

Do you have any plans to extend support to Windows XP?

As you indicated below, this currently does not work yet on XP; it
returns the following error (using Nmap 5.10BETA2, target is Windows
XP SP3):


Host script results:
| smb-psexec:
|_ ERROR: Couldn’t create the service on the remote machine:
NT_STATUS_UNKNOWN (0x000006e4) (svcctl.openscmanagerw)
Final times for host: srtt: 1742 rttvar: 6224 to: 100000

On the other hand, winexec does work fine
on this host.
Given that I believe that you are following a similar method as
winexec (see http://seclists.org/nmap-dev/2009/q1/374), this is
promising :)

Any idea?

Thanks!


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 484 other followers