Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My company has a very large distributed network which we scan monthly for vulnerability assessment. As part of that scanning, we try to find all accessible network hosts with a ping sweep. Since zmap can be used to map the entire internet (according to reports) in around 45 minutes, could the tool be used to map an organization's network quickly also?

Could you do this by restricting the address space in the blacklist file, or would you need to recode the tool to handle this use case?

share|improve this question

From the zmap documentation:

The blacklist file will list subnets to exclude, in CIDR notation (e.g., one-per line. It is recommended you use this to exclude RFC 1918 addresses, multicast, IANA reserved space, and other IANA special-purpose addresses. An example blacklist file is provided in conf/blacklist.example for this purpose.

So work out what ranges you can blacklist without removing addresses you own and add them into the blacklist file.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.