<div dir="ltr"><div><div>"nmap -sn host"<br><br></div>if that is unreliable, you could try "nmap -sn -PE -PP -PM -PO host"<br><br></div>if you know certain ports that will be open, you could use -PS80 for a SYN ping to port 80 or -PU13337 for a UDP ping to port 13337 (you want to use a closed port).<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Oct 10, 2014 at 3:53 PM, Chris Fowler <span dir="ltr"><<a href="mailto:cfowler@outpostsentinel.com" target="_blank">cfowler@outpostsentinel.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>I have a script I use in Perl that tests a list of hosts via the exit code of ping. Some hosts, like Winders, will ignore ICMP ECHO and this creates</div><div>false alerts.</div><div><br></div><div>The idea popped in my head today to use the exit code of nmap and allow it to test for me. </div><div><br></div><div>Can someone clue me in on the best command like options to nmap that will allow it to make a decent determination of a host is up?</div><div><br></div><div>I did think about running an initial port scan and then doing an accept() test on a TCP socket, but then I decided maybe I'd just let nmap make</div><div>the up/down decision.</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Chris</div></font></span></div></div><br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br></div>