Skip to main content
Name:zmap
Category:Network
Publisher:trickest-mhmdiaa
Created:10/25/2023
Container:quay.io/trickest/zmap:v4.3.2
Output Type:
License:Unknown

Parameters

​
rate
string
--rateSet send rate in packets/sec
​
seed
string
--seedSeed used to select address permutation
​
batch
string
--batchSet the number of packets to send per iteration
​
cores
string
--coresComma-separated list of cores to pin to
​
notes
string
--notesInject user-specified notes into scan metadata
​
quiet
boolean
--quietDo not print status updates
​
shard
string
--shardSet which shard this scan is (0 indexed) (default=`0')
​
config
file
--configRead a configuration file, which can specify any of these options
​
dryrun
boolean
--dryrunDon't actually send packets
​
probes
string
--probesNumber of probes to send to each IP (default=`1')
​
shards
string
--shardsSet the total number of shards (default=`1`)
​
iplayer
boolean
--iplayerSends IP packets instead of Ethernet (for VPNs)
​
retries
string
--retriesMax number of times to try to send packet if send fails (default=`10')
​
bandwidth
string
--bandwidthSet send rate in bits/second (supports suffixes G, M and K)
​
interface
string
--interfaceSpecify network interface to use
​
probe-ttl
string
--probe-ttlSet TTL value for probe IP packets (default=`255')
​
source-ip
string
--source-ipSource address(es) for scan packets (ip or range)
​
verbosity
string
--verbosityLevel of log detail (0-5) (default `3')
​
probe-args
string
--probe-argsArguments to pass to probe module
​
source-mac
string
--source-macSource MAC address
​
fast-dryrun
boolean
--fast-dryrunDon't actually send packets, print out a binary representation probe dst IP and dst Port. Used for faster integration tests, not for general use.
​
gateway-mac
string
--gateway-macSpecify gateway MAC address
​
max-results
string
--max-resultsCap number of results to return
​
max-runtime
string
--max-runtimeCap length of time for sending packets
​
max-targets
string
--max-targetsCap number of targets to probe (as a number or a percentage of the address space)
​
min-hitrate
string
--min-hitrateMinimum hitrate that scan can hit before scan is aborted (default=`-1')
​
output-args
string
--output-argsArguments to pass to output module
​
source-port
string
--source-portSource port(s) for scan packets (port or range)
​
dedup-method
string
--dedup-methodSpecifies how response deduplication should be performed. Options: default, none, full, window
​
probe-module
string
--probe-moduleSelect probe module (default `tcp_synscan')
​
target-ports
string
required
--target-portscomma-delimited list of ports and port ranges to scan (for TCP and UDP scans)
​
cooldown-time
string
--cooldown-timeHow long to continue receiving after sending last probe (default=`8')
​
no-header-row
boolean
--no-header-rowPrecludes outputting any header rows in data (e.g., CSV headers)
​
output-fields
string
--output-fieldsFields that should be output in result set
​
output-filter
string
--output-filterSpecify a filter over the response fields to limit what responses get sent to the output module
​
output-module
string
--output-moduleSelect output module
​
user-metadata
file
--user-metadataInject user-specified JSON metadata into scan (JSON)
​
allowlist-file
file
required
--allowlist-fileFile of subnets to constrain scan to, in CIDR notation, e.g. 192.168.0.0/16
​
blocklist-file
file
--blocklist-fileFile of subnets to exclude, in CIDR notation, e.g. 192.168.0.0/16
​
disable-syslog
boolean
--disable-syslogDisables logging messages to syslog
​
sender-threads
string
--sender-threadsThreads used to send packets (default `4')
​
list-of-ips-file
file
required
--list-of-ips-fileList of individual addresses to scan in random order. Use --white-list file unless >1 million IPs
​
netmap-wait-ping
string
--netmap-wait-pingWait for IP to respond to ping before commencing scan (netmap only)
​
dedup-window-size
string
--dedup-window-sizeSpecifies window size for how many recent responses to keep in memory for deduplication (default=`1000000`)
​
list-output-fields
boolean
--list-output-fieldsList all fields that can be output by selected probe module
​
list-probe-modules
boolean
--list-probe-modulesList available probe modules
​
list-output-modules
boolean
--list-output-modulesList available output modules
​
max-sendto-failures
string
--max-sendto-failuresMaximum NIC sendto failures before scan is aborted (default=`-1')
​
validate-source-port
string
--validate-source-portOverride to validate if probe responses have a valid src port corresponding to sent probe's dst port. enable or disable
​
ignore-blocklist-errors
boolean
--ignore-blocklist-errors--ignore-blocklist-errors Ignore invalid entries in allowlist/blocklist