I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do an nmap scan that only includes the service/port scanning used in the option -A but I'm not quite sure what type of service/port scan is used in option -A. I read somewhere that it was a script scan, but a basic script scan did not give the same results. Does anyone know what the exact commands are when option -A is used in nmap?

  • Does -sV and/or -O give you what you want?
    – lew
    Apr 18, 2012 at 3:51
  • not at all. I think -A may stand for advanced options, which would include upping the intensity of the service/port scan but I'm not sure. Apr 18, 2012 at 4:13
  • Never mind; I figured it out. Equivalent command for just service/port scanning is --traceroute -sV -sC. Apr 18, 2012 at 7:20
  • Relevant: Nmap Guide - Misc Options
    – Gurzo
    Apr 18, 2012 at 18:44
  • @BhubhuHbuhdbus make that an answer and accept it, so that this question can be closed. Also, link to where you discovered the info.
    – schroeder
    Apr 18, 2012 at 19:14

1 Answer 1


According to nmap man page:

-A: Enables OS detection and Version detection, Script scanning and Traceroute.
-sV: Enables version detection, as discussed above. Alternatively, you can use -A, which enables version detection among other things.

It's the same as -O -sV -sC --traceroute.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .