++++++++++++++++++++++++++++++++++
| NPING COMMAND LINE INTERFACE |
++++++++++++++++++++++++++++++++++
This document presents Nping's command line interface. All option flags are
now definitive. Howerever, comments and suggestions are still welcome.
Nping 0.01a ( http://nmap.org/nping )
Usage: nping [Probe mode] [Options] {target specification}
TARGET SPECIFICATION:
Targets may be specified as hostnames, IP addresses, networks, etc.
Ex: scanme.nmap.org, microsoft.com/24, 192.168.0.1; 10.0.0-255.1-254
-iL <inputfilename>: Read targets from list of hosts or networks
PROBE MODES:
--tcp-connect : Unprivileged TCP connect probe mode.
--tcp : TCP probe mode.
--upd : UPD probe mode.
--icmp : ICMP probe mode.
--arp : ARP Request probe mode.
--rarp : RARP Request probe mode.
--arp-response : ARP Response probe mode.
--rarp-response : RARP Response probe mode.
-tr, --traceroute : Traceroute mode (can be used together with TCP/UDP/ICMP
pings, but not with ARP ping)
TCP PROBE MODE:
-g, --source-port <portnumber> : Set source port.
-p, --dest-port <portnumber> : Set destination port.
--seq <seqnumber> : Set sequence number.
--flags <flags> : Set TCP flags.
--ack <acknumber> : Set ACK number.
--win <size> : Set window size.
--badsum : Use a random invalid checksum.
--mss <size> : Set maximum segment size.
--ws <n> : Set window scale.
--ts <echo,reply> : Set timestamp (echo and reply fields).
UDP PROBE MODE:
-g, --source-port <portnumber> : Set source port.
-p, --dest-port <portnumber> : Set destination port.
--badsum : Use a random invalid checksum.
ICMP PROBE MODE:
-I3, --dest-unr : Send "destination unreacheable" messages.
-I8, --echo-req : Send "echo request" messages.
-I13, --ts-req : Send "timestamp request" messages.
-I15, --info-req : Send "Information request" messages.
-I17, --netmask-req : Send "Netmask request" messages.
--icmp-code <code> : ICMP code.
--icmp-id <id> : Sets field "Identifier" in echo messages (16bits).
--icmp-seq <n> : Sets field "Sequence number" in echo messages (16 bits).
ARP/RARP PROBE MODE:
--arp-sender-mac <mac> : Set sender MAC address.
--arp-sender-ip <ip> : Set sender IP address.
--arp-target-mac <mac> : Set target MAC address.
--arp-target-ip <ip> : Set target IP address.
ETHERNET OPTIONS:
--dest-mac : Set destination mac address. This disables ARP resolution.
--source-mac : Set source MAC address.
IP OPTIONS:
-S, --source-ip : Set source IP address.
--dest-ip : Set destination IP address (used as an alternative to
{target specification} ).
--tos <val> : Set type of service field (8bits).
--id <val> : Set identification field (16 bits).
--df : Set Dont Fragment flag.
--mf : Set More Fragments flag.
--ttl <val> : Set time to live [0-256].
--badsum-ip : Use a random invalid checksum.
--ip-options S|R [route]|L [route]|T|U ... : Set IP options
--ip-options hex string : Set IP options
--mtu <len> : Set MTU. Packets get fragmented if MTU is small enough.
-f : Fragment packets.
PAYLOAD OPTIONS:
--data <hex string> : Include TCP/UPD/ICMP payload (if it makes sense).
--data-file <filename> : Get payload from specified file.
--data-length <len> : Include len random bytes as payload.
ECHO CLIENT/SERVER:
-K, --ekey <hex> : Key to be used for encryption/decryption.
-P, --passphrase : Passphrase to derive an encryption key from.
CLIENT-ONLY OPTIONS:
--client : Run Nping in client mode.
--interpret : Interpret received echoes.
SERVER-ONLY OPTIONS:
--server : Run Nping in server mode.
--echo-link : Return back: link+net+transport+payload
--echo-net : Return back: net+transport+payload
--echo-trans : Return back: transport+payload
--echo-data : Just return payload.
TIMING AND PERFORMANCE:
Options which take <time> are in milliseconds, unless you append 's'
(seconds), 'm' (minutes), or 'h' (hours) to the value (e.g. 30m).
--delay <time> : Adjust delay between probes.
--rate <num> : Send num packets per second.
--host-timeout <time> : Give up on target after this long.
MISC:
-h, --help : Display help information on stardard output.
-V, --version : Display Nping current version number.
-c, --count <n> : Stop after sending (and receiving) n response packets.
-e, --interface <name> : Use supplied network interface.
--privileged : Assume that the user is fully privileged.
--unprivileged : Assume the user lacks raw socket privileges.
--send-eth : Send packets at the raw ethernet layer.
--send-ip : Send packets using raw IP sockets.
OUTPUT:
-v : Increment verbosity level by one.
-v[level] : Set verbosity level. E.g: -v4
-d : Increment debugging level by one.
-d[level] : Set debugging level. E.g: -d3
--quiet : Sets verbosity and debug level to zero. (Same as -v0 -d0)
--debug : Sets verbosity and debug to their highest level.
EXAMPLES:
nping scanme.nmap.org
nping --tcp --dest-port 80 --ttl 2 192.168.1.1
nping --debug --icmp -I17 --delay 2s microsoft.com
SEE THE MAN PAGE FOR MANY MORE OPTIONS, DESCRIPTIONS, AND EXAMPLES
+------------------------------------------------------------------------------+
NOTES:
In places where a port number, an IP address, etc, is expected, it is possible
to specify the word "rand" or "random", so Nping sets a random value for that
option.
E.g: nping --tcp --dest-port random 192.168.1.1
nping --udp --source-port random --source-mac random 207.46.197.32
nping --arp --sender-ip random --ttl random scanme.nmap.org
In places where a MAC address is expected, it is possible to especify a MAC
address, a prefix or a vendor name. Missing information will be completed with
random values.
+------------------------------------------------------------------------------+