Using NMAP for Ping Sweep and OS Detection August 30, 2010
Posted by networknuts in Uncategorized.Tags: alok srivastava, best training institute, linux blog, linux delhi, linux training, linux videos, networknuts, nmap, nmap tutorial, redhat, redhat india, rhce, rhce delhi, rhce india, rhcss, rhcss delhi, rhcss india, using nmap
trackback
Ping Sweeping is the process of pinging numerous hosts. In the case of a large set of target IP addresses, one must perform a ping sweep to determine alive hosts that respond to ICMP echo requests. This information can be very useful for a administrator checking his network status.
We can use “nmap” for this purpose.
Step #1. Install NMAP
You can either use the Internet repositories for this purpose and use:
yum install nmap
or you can manuall download the nmap package from this link – http://nmap.org/download.html
Step #2.Use nmap for Ping Sweep
nmap -sP 172.24.0.*
In this case I am trying to use ping-sweep to scan my whole network to find out which machines are LIVE and KICKING right now.
Here is what I get from this simple command. :P
NMAP is so wonderful tool in your hands that it can be used for many purposes.
One more very simple, very interesting and very important job that nmap can perform is that it can also give you the OS details of your machines running within your domain.
Using nmap for OS detection:
nmap -O 172.24.0.*
Just give this command and see ALL your machines telling their OS’s to you.
Below is what I get !!
To watch the video of this post on Network NUTS YouTube channel – http://www.youtube.com/watch?v=WMPr4dvdo74
God Bless !!
Enjoy your EDGE !!


Thanks, good tips
Keep it up
Hello,
Thanks a lot for this script, that is really exciting stuff!
Do you have any plans to extend support to Windows XP?
As you indicated below, this currently does not work yet on XP; it
returns the following error (using Nmap 5.10BETA2, target is Windows
XP SP3):
–
Host script results:
| smb-psexec:
|_ ERROR: Couldn’t create the service on the remote machine:
NT_STATUS_UNKNOWN (0x000006e4) (svcctl.openscmanagerw)
Final times for host: srtt: 1742 rttvar: 6224 to: 100000
–
On the other hand, winexec does work fine
on this host.
Given that I believe that you are following a similar method as
winexec (see http://seclists.org/nmap-dev/2009/q1/374), this is
promising
Any idea?
Thanks!