Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do an nmap scan that only includes the service/port scanning used in the option -A but I'm not quite sure what type of service/port scan is used in option -A. I read somewhere that it was a script scan, but a basic script scan did not give the same results. Does anyone know what the exact commands are when option -A is used in nmap?

share|improve this question
Does -sV and/or -O give you what you want? – lew Apr 18 '12 at 3:51
not at all. I think -A may stand for advanced options, which would include upping the intensity of the service/port scan but I'm not sure. – Bhubhu Hbuhdbus Apr 18 '12 at 4:13
Never mind; I figured it out. Equivalent command for just service/port scanning is --traceroute -sV -sC. – Bhubhu Hbuhdbus Apr 18 '12 at 7:20
Relevant: Nmap Guide - Misc Options – Gurzo Apr 18 '12 at 18:44
@BhubhuHbuhdbus make that an answer and accept it, so that this question can be closed. Also, link to where you discovered the info. – schroeder Apr 18 '12 at 19:14
up vote 5 down vote accepted

-A: Enables OS detection and Version detection, Script scanning and Traceroute

It's the same as -O -sV -sC --traceroute

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.