chris-piekarski
3/13/2015 - 4:49 AM

zmap vs. nmap CIDR/24/16

zmap vs. nmap CIDR/24/16

#nmap host discovery
#Nmap sends an ICMP echo request, a TCP SYN packet to port 443, a TCP ACK packet to port 80, and an ICMP timestamp request.

$ time sudo zmap -p 80 -i wlan1 10.0.0.0/24

real	0m9.135s
user	0m0.153s
sys	0m0.109s

CIDR 24

$ time nmap -p 80 10.0.0.0/24

real	0m3.612s
user	0m0.122s
sys	0m0.039s

CIDR 16

$ time sudo zmap -p 80 -i wlan1 10.0.0.0/16
real	1m11.225s
user	0m0.498s
sys	0m1.326s


$ time nmap -p 80 10.0.0.0/16

Nmap done: 65536 IP addresses (3 hosts up) scanned in 5482.31 seconds

real	91m22.334s
user	1m22.048s91
sys	0m17.157s


$ time nmap -T5 -p 80 10.0.0.0/24

Nmap done: 65536 IP addresses (3 hosts up) scanned in 1293.12 seconds

real	21m33.132s
user	1m33.867s
sys	0m11.227s


#nmap default 1000 vs. all ports
$ time nmap -v -p- 10.0.0.1
Scanning 10.0.0.1 [65535 ports]
Completed Connect Scan at 23:12, 142.96s elapsed (65535 total ports)


$ time nmap -v 10.0.0.1
Scanning 10.0.0.1 [1000 ports]
Nmap done: 1 IP address (1 host up) scanned in 4.53 seconds