Nmap Commands
Network discovery and auditing of your own hosts.All Nmap pages
- nmap -O: detect the operating system of a hostnmap -O guesses a host's operating system from TCP/IP fingerprints. Options such as --osscan-guess and --osscan-limit, reading the result, root and pitfalls.
- nmap -p: scan specific ports, port ranges or all 65535 portsnmap -p 22,80,443 HOST scans only those ports; -p 1-1024 a range, -p- all 65535, -p U:53,T:22 mixes UDP and TCP. --top-ports N and --open narrow the results.
- nmap -sn 192.168.1.0/24: find live hosts on a network (ping scan)nmap -sn 192.168.1.0/24 finds live hosts without scanning ports. Run it with sudo for ARP discovery, list only the IPs, and handle hosts that block probes.
- nmap -sU: scan UDP ports (DNS, SNMP, DHCP)nmap -sU scans UDP ports such as DNS, NTP and SNMP. What open|filtered means, why UDP scans are slow, faster options, combined TCP and UDP port syntax.