Re: Scan 3 thousand host consume severals hour

[Ron <iago () valhallalegends com>]

In addition to what Sina already said (which is good advice), there's 
also a section in nmap's manpage about timing and performance:

TIMING AND PERFORMANCE:
  -T[0-5]: Set timing template (higher is faster)
  --min_hostgroup/max_hostgroup <msec>: Parallel host scan group sizes
  --min_parallelism/max_parallelism <msec>: Probe parallelization
  --min_rtt_timeout/max_rtt_timeout/initial_rtt_timeout <msec>: Specifies
      probe round trip time.
  --host_timeout <msec>: Give up on target after this long
  --scan_delay/--max_scan_delay <msec>: Adjust delay between probes


By tweaking those options, you can probably squeeze some extra 
performance out of it.  Of course, you have to be careful; if you set it 
to scan too fast, you might miss hosts and ports.  It might take some 
experimentation to get it set up properly.

Good luck
Ron


Ricardo A. Reis wrote:
> Hi,
>
>
> I work on the UNIFESP a large Brazilian University with +/- 
> 3000 windows workstations, now  i  create a routine capable to  scan  
> for worms  and  softwares listening, in my test the scan consumo +/- 49 
> hours, because many workstations with WinXP use firewall.
>          The question is with is possible reduce the time ?
>  
>       i use this line on FreeBSD Monitor,
>   
> #nmap -v -sT -sU -p 1-65535 -n  172.16.0.0/16 
>
>
> Thanks
>
> Ricardo A. Reis
> UNIFESP
> Unix and Network Admin
>
>
>
>
>       
>
>       
>               
> _______________________________________________________ 
> Yahoo! doce lar. Faça do Yahoo! sua homepage. 
> http://br.yahoo.com/homepageset.html 
>
>
>
> ------------------------------------------------------------------------
>
>
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev