DIFFERENCE BETWEEN NMAP AND ZENMAP FULL
DIFFERENCE BETWEEN NMAP AND ZENMAP WINDOWS

DIFFERENCE BETWEEN NMAP AND ZENMAP WINDOWS

Zenmap is an excellent Windows GUI for nmap and takes the edge off of the learning curve. Using saved profiles also ensures that when comparing two scan results you are working from the same scan options. Saving profiles saves time because it allows the administrator to quickly perform familiar and repetitive scans without specifying the target and options. Use the Profile Editor to develop custom profiles that meet your enterprise needs

Timing: Defines timing profile with respect to maximum scan time, scan delay, and timeouts, among other things.

Other: Includes options for verbosity level, TTL, and other scanner behaviors.

Source: Specify how you would like the scanner to behave with respect to scanning identity, IP address, port, and interface.

Target: Allows for greater target specification flexibility, including excluded hosts, target list files, and fast scan support.

Scripting: Include nmap scripts in your scan.

You can suppress pings or build a specific ICMP packet

Scan: The most important tab, where you can specify targets, scan type (TCP, UDP, IP), timing template, and much more.

Profile: The name and description of your profile.

The Profile Editor window contains the following tabs: These profiles can be saved for later use and even exported to other interested admins. Perhaps the best feature of Zenmap is its Profile Editor, which empowers users who are unfamiliar with nmap syntax to build powerful and custom scanning profiles. The XML format is also very friendly for consumption by third party report generation packages as well as web service reporting.Ī sample XML report generated by Zenmap Custom profiles ^ This comes in handy when you perform a large scan and do not want to repeat the scan again later while reviewing results. Saving scans ^īy going to File > Save Scan, you can save a scan result report in XML or plain text format for later consumption. The Search Scan Results tool is great for finding specific text in results, and the Filter Hosts tool does exactly what you would imagine - it filters hosts, which comes in handy when scanning large subnets or lists of networks. The Compare Results tool provides an interface for differentiating between two scans, which can be used to monitor daily changes in network topology or available hosts. Zenmap also ships with some useful tools that can help you track changes between scans and drill down to useful information within long scan results.

Host Details: Displays a condensed report of pertinent host information from the scanĪ sample Nmap output window from an Intense scan Useful tools.

Topology: A neat diagram of the network topology as understood by Nmap.

If a service is selected on the left, this will display all hosts for that service

Ports/Hosts: If a host is selected on the left, this will display open and unknown ports.

Nmap output: The piped output of the nmap command sent by Zenmap.

These tabs either directly report the output of nmap or expand on the output with diagrams and user-friendly reports. Zenmap provides different tabs for reporting on scan results.

CIDR Notation: Nmap accepts CIDR target specification, like 192.168.5.0/24.

Interval: Intervals are denoted by a dash in the IP address for example, if you want to scan 192.168.1.0/24 through 192.168.10.0/24, you would use 192.168.1-10.0-255.

Single host: Just a hostname or IP address will do, like localhost or 127.0.0.1.

Nmap uses the following syntax for target definitions:

DIFFERENCE BETWEEN NMAP AND ZENMAP FULL

Defining a target ^Įvery scan must be associated to a specific target, which can be a single host, an interval range of hosts, or a full subnet. If your goal is to map out every single TCP port, you’ll need to do an Intense scan, all TCP ports at a minimum. For example, if your goal is host discovery, Quick scan might do the job. Budding administrators can choose profiles that match their needs.

It ships with some handy preset profiles, such as Intense scan, which scans hosts with “all advanced/aggressive options,” Quick scan, which scans hosts without those advanced options, and Slow comprehensive scan, which is exactly as it sounds. Zenmap uses Profiles, which are basically nmap parameter presets, to specify how scans are performed. The basic operation in nmap is network scanning and Zenmap allows you to perform and save scans as well as the results from those scans. Zenmap makes it easy to build out command line options like this

Difference between nmap and zenmap