At times, you may need to identify all live hosts on a network during a penetration test. Nmap is able to perform a ping sweep across multiple targets, whether specifying a range or an entire subnet. Using the -sn operator will allow you to perform a ping scan only on the target:
In the preceding snippet, Nmap has presented only the hosts that it thinks are alive on the network segment and was able to look up the MAC addresses of each host to determine the vendor.
- If you would like to perform a range scan, you can use the following syntax: nmap start ip addr - end ip addr.
- If you would ...