Home / server / Questions / 246567
In Process
Registered User
Asked: 2011-03-13 04:08:00 +0800 CST

use of nmap clogged my network

  • 772

I was using nmap to scan the mac addresses of my network.What I found was internet connections and rest of network services badly clogged the users were not able to connect to internet.After messing with different things some times later we noticed on one of machines I was running nmap and stopping it did the trick.

nmap -sP 192.168.1.0/20

Is what I was trying and it basically clogged the entire network. Can some one suggest what can be a remedy for same and why it actually happened?

EDIT

As some people suggested below it generates a lot of ARP traffic
1) is there a way I can measure this ARP traffic?
2) In this case since user applications could not reach internet is there some way I can detect congestion in network.Here nmap was run by me as root so I knew but for future I want to know.

network-monitoring cisco network-management nmap bandwidth-control

1 Answers

  1. There is a difference between running nmap as root, and as a regular user.

    Basically, when you run it as a regular user and the target machine blocks ICMP, nmap will do a complete three-way handshake and set up a complete TCP connection. This is more demanding than the "TCP ping" method that is used when you run it as root.

    For more info, read part 5 of this tutorial.

    As joeqwerty stated in the comments, doing a scan of such a broad spectrum causes a lot of ARP traffic on your network.

    I'd like to point you to a another relevant page on nmap.org. It explains some tricks for specifiying scan targets.
    Nmap really has excellent documentation.

    • 6