My company has a very large distributed network which we scan monthly for vulnerability assessment. As part of that scanning, we try to find all accessible network hosts with a ping sweep. Since zmap can be used to map the entire internet (according to reports) in around 45 minutes, could the tool be used to map an organization's network quickly also?

Could you do this by restricting the address space in the blacklist file, or would you need to recode the tool to handle this use case?


From the zmap documentation:

The blacklist file will list subnets to exclude, in CIDR notation (e.g., one-per line. It is recommended you use this to exclude RFC 1918 addresses, multicast, IANA reserved space, and other IANA special-purpose addresses. An example blacklist file is provided in conf/blacklist.example for this purpose.

So work out what ranges you can blacklist without removing addresses you own and add them into the blacklist file.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.