Ping scanning without nmap

prefix="10.0.0" && for i in `seq 25`; do ping -c 1 $prefix.$i &> /dev/null && echo "Answer from: $prefix.$i" ; done

Not really an easier solution. But an example using && for (if last command returned 0). You can use || for (if last command returned other than 0)..

Sample Output

Answer from: 10.0.0.1
Answer from: 10.0.0.2
Answer from: 10.0.0.4
Answer from: 10.0.0.5
Answer from: 10.0.0.6

-2

By: xeor

2010-04-07 17:17:21

echo ping ping

4 Alternatives + Submit Alt

Ping scanning without nmap

Usefull for when you don't have nmap and need to find a missing host. Pings all addresses from 10.1.1.1 to 10.1.1.254, modify for your subnet. Timeout set to 1 sec for speed, if running over a slow connection you should raise that to avoid missing replies. This will clean up the junk, leaving just the IP address: for i in {1..254}; do ping -c 1 -W 1 10.1.1.$i | grep 'from' | cut -d' ' -f 4 | tr -d ':'; done Show Sample Output
This is sample output - yours may be different.
```
64 bytes from 10.1.1.1: icmp_seq=1 ttl=255 time=0.622 ms
64 bytes from 10.1.1.2: icmp_seq=1 ttl=64 time=0.078 ms
64 bytes from 10.1.1.50: icmp_seq=1 ttl=128 time=0.204 ms
64 bytes from 10.1.1.250: icmp_seq=1 ttl=128 time=0.344 ms
```
14

for i in {1..254}; do ping -c 1 -W 1 10.1.1.$i | grep 'from'; done

SuperJediWombat · 2010-04-07 16:57:53 7
Ping sweep without NMAP

Ping sweep without NMAP
This is sample output - yours may be different.
3

for i in `seq 1 255`; do ping -c 1 10.10.10.$i | tr \\n ' ' | awk '/1 received/ {print $2}'; done

hemanth · 2009-08-22 09:34:27 12
Ping sweep without NMAP

Waits for all pings to complete and returns ip with mac address
This is sample output - yours may be different.
3

(prefix="10.59.21" && for i in `seq 254`; do (sleep 0.5 && ping -c1 -w1 $prefix.$i &> /dev/null && arp -n | awk ' /'$prefix'.'$i' / { print $1 " " $3 } ') & done; wait)

smoky · 2014-04-02 11:20:57 10
Ping sweep without NMAP

This version combines the best of the other suggestions and adds these features: 1. It scans a /16 subnet 2. It is very fast by running the ping commands in the background, running them in parallel. 3. Does not use the "-W" option as that's not available in older ping versions (I needed this for OS X 10.5)
This is sample output - yours may be different.
0

prefix="169.254" && for i in {0..254}; do echo $prefix.$i/8; for j in {1..254}; do sh -c "ping -m 1 -c 1 -t 1 $prefix.$i.$j | grep \"icmp\" &" ; done; done

tempelorg · 2012-07-25 12:07:15 3

What Others Think

Note that "seq" is not portable (it isn't standard) and probably works on Linux only. On BSD systems there is a similar command called "jot", which is equally non-portable, of course. Solaris and other systems have neither of these. It's also worth mentioning that some shells have built-in features that fullfill the same purpose. For example, in zsh and bash you can write "for i in {1..25}". But this is also non-standard and doesn't work with plain bourne shells, e.g. it is not supported by /bin/sh on most non-Linux systems (where /bin/sh is neither bash nor zsh).

inof · 732 weeks and 1 day ago

rahimhh21 · 85 weeks and 1 day ago

Perfecthomepugs · 76 weeks and 3 days ago

pugpuppies95 · 38 weeks and 4 days ago

What do you think?

Any thoughts on this command? Does it work on your machine? Can you do the same thing with only 14 characters?

You must be signed in to comment.

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Similar Commands

nmap port scanning

nmap all my hosts in EC2

Get info about remote host ports and OS detection

ping a range of IP addresses

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)