Translations by Gyanendra Mishra

SCTP INIT ping probes

Scripting options (NSE)

Use the Nmap Scripting Engine to gain more information about targets after scanning them.

Script scan

Run the given scripts. Give script names, directory names, or category names. Categories are "safe", "intrusive", "malware", "discovery", "vuln", "auth", "external", "default", and "all". If blank, scripts in the "default" category are run.

Scripts to run

Give arguments to certain scripts that use them. Arguments are <name>=<value> pairs, separated by commas. Values may be Lua tables.

Script arguments

Show all information sent and received by the scripting engine.

Trace script execution

Target options

Specifies a comma-separated list of targets to exclude from the scan.

Excluded hosts/networks

Specifies a newline-, space-, or tab-delimited file of targets to exclude from the scan.

Exclusion file

Reads target list specification from an input file.

Target list file

Option to choose targets at random. Tells Nmap how many IPs to generate. 0 is used for a never-ending scan.

Scan random hosts

This option specifies which ports you want to scan and overrides the default.

Ports to scan

Only scan ports named in the nmap-services file which comes with Nmap (or nmap-protocols file for -sO).

Fast scan

Source options

Send fake decoy probes from spoofed addresses to hide your own address. Give a list of addresses separated by commas. Use RND for a random address and ME to set the position of your address.

Use decoys to hide identity

Specify the IP address of the interface you wish to send packets through.

Set source IP address

Provide a port number and Nmap will send packets from that port where possible.

Set source port

Tells Nmap what interface to send and receive packets on.

Set network interface

Other options

Any extra options to add to the command line.

Extra options defined by user

Set the IPv4 time-to-live field in sent packets to the given value.

Set IPv4 time to live (ttl)

Causes the requested scan (including ping scans) to split up TCP headers over several packets.

Fragment IP packets

Print more information about the scan in progress. Open ports are shown as they are found as well as completion time estimates.

Verbosity level

When even verbose mode doesn't provide sufficient data for you, debugging level is available to show more detailed output.

Debugging level

Print a summary of every packet sent or received.

Packet trace

Scan ports in order instead of randomizing them.

Disable randomizing scanned ports

Trace the network path to each target after scanning. This works with all scan types except connect scan (-sT) and idle scan (-sI).

Trace routes to targets

Try sending a probe to each port no more than this many times before giving up.