zmap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

Name:zmap

Category:Network

Publisher:trickest-mhmdiaa

Created:10/25/2023

Container:quay.io/trickest/zmap:v4.3.2

Output Type:

License:Unknown

Source:View Source

Parameters

rate · string

--rateSet send rate in packets/sec

seed · string

--seedSeed used to select address permutation

batch · string

--batchSet the number of packets to send per iteration

cores · string

--coresComma-separated list of cores to pin to

notes · string

--notesInject user-specified notes into scan metadata

quiet · boolean

--quietDo not print status updates

shard · string

--shardSet which shard this scan is (0 indexed) (default=`0')

config · file

--configRead a configuration file, which can specify any of these options

dryrun · boolean

--dryrunDon't actually send packets

probes · string

--probesNumber of probes to send to each IP (default=`1')

shards · string

--shardsSet the total number of shards (default=`1`)

iplayer · boolean

--iplayerSends IP packets instead of Ethernet (for VPNs)

retries · string

--retriesMax number of times to try to send packet if send fails (default=`10')

bandwidth · string

--bandwidthSet send rate in bits/second (supports suffixes G, M and K)

interface · string

--interfaceSpecify network interface to use

probe-ttl · string

--probe-ttlSet TTL value for probe IP packets (default=`255')

source-ip · string

--source-ipSource address(es) for scan packets (ip or range)

verbosity · string

--verbosityLevel of log detail (0-5) (default `3')

probe-args · string

--probe-argsArguments to pass to probe module

source-mac · string

--source-macSource MAC address

fast-dryrun · boolean

--fast-dryrunDon't actually send packets, print out a binary representation probe dst IP and dst Port. Used for faster integration tests, not for general use.

gateway-mac · string

--gateway-macSpecify gateway MAC address

max-results · string

--max-resultsCap number of results to return

max-runtime · string

--max-runtimeCap length of time for sending packets

max-targets · string

--max-targetsCap number of targets to probe (as a number or a percentage of the address space)

min-hitrate · string

--min-hitrateMinimum hitrate that scan can hit before scan is aborted (default=`-1')

output-args · string

--output-argsArguments to pass to output module

source-port · string

--source-portSource port(s) for scan packets (port or range)

dedup-method · string

--dedup-methodSpecifies how response deduplication should be performed. Options: default, none, full, window

probe-module · string

--probe-moduleSelect probe module (default `tcp_synscan')

target-ports · string · required

--target-portscomma-delimited list of ports and port ranges to scan (for TCP and UDP scans)

cooldown-time · string

--cooldown-timeHow long to continue receiving after sending last probe (default=`8')

no-header-row · boolean

--no-header-rowPrecludes outputting any header rows in data (e.g., CSV headers)

output-fields · string

--output-fieldsFields that should be output in result set

output-filter · string

--output-filterSpecify a filter over the response fields to limit what responses get sent to the output module

output-module · string

--output-moduleSelect output module

user-metadata · file

--user-metadataInject user-specified JSON metadata into scan (JSON)

allowlist-file · file · required

--allowlist-fileFile of subnets to constrain scan to, in CIDR notation, e.g. 192.168.0.0/16

blocklist-file · file

--blocklist-fileFile of subnets to exclude, in CIDR notation, e.g. 192.168.0.0/16

disable-syslog · boolean

--disable-syslogDisables logging messages to syslog

sender-threads · string

--sender-threadsThreads used to send packets (default `4')

list-of-ips-file · file · required

--list-of-ips-fileList of individual addresses to scan in random order. Use --white-list file unless >1 million IPs

netmap-wait-ping · string

--netmap-wait-pingWait for IP to respond to ping before commencing scan (netmap only)

dedup-window-size · string

--dedup-window-sizeSpecifies window size for how many recent responses to keep in memory for deduplication (default=`1000000`)

list-output-fields · boolean

--list-output-fieldsList all fields that can be output by selected probe module

list-probe-modules · boolean

--list-probe-modulesList available probe modules

list-output-modules · boolean

--list-output-modulesList available output modules

max-sendto-failures · string

--max-sendto-failuresMaximum NIC sendto failures before scan is aborted (default=`-1')

validate-source-port · string

--validate-source-portOverride to validate if probe responses have a valid src port corresponding to sent probe's dst port. enable or disable

ignore-blocklist-errors · boolean

--ignore-blocklist-errors--ignore-blocklist-errors Ignore invalid entries in allowlist/blocklist