Ping sweep
From Wikipedia, the free encyclopedia
Ping Sweep is a technique used to determine what devices are on a computer network. This uses what is often known as Ping to find computers. A ping is often used to check that a network device is functioning. A Ping sweep uses the Ping but as a systematic scan of all network addresses. Best example would be going through a telephone book and ringing each number to see who answers.
Ping also known as an [Internet Control Message Protocol] or ICMP sweep is a basic network scanning technique used to determine which of a range of IP addresses map to live hosts (computers). Whereas a single ping will tell you whether one specified host computer exists on the network, a ping sweep consists of ICMP (Internet Control Message Protocol) ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. Ping sweeps are among the older and slower methods used to scan a network.
[edit] Tools
There are a number of tools that can be used to do a ping sweep, such as fping, gping, and nmap for Unix systems, and the Pinger software from Rhino9 and Ping Sweep from SolarWinds for Windows systems. Both Pinger and Ping Sweep send multiple packets at the same time and allow the user to resolve host names and save output to a file.
To disable ping sweeps on a network, administrators can block ICMP ECHO requests from outside sources. However, ICMP TIMESTAMP and Address Mask Requests can be used in a similar manner.