Specifying addresses

The scan address specification is passed directly to the NMAP program, and follows the standard NMAP syntax for specifying a range of devices.

• Using asterisks—The user can specify an * for any IP address segment to match all numbers from 0 to 255. 

  Information192.168.1.* matches 256 devices from 192.168.1.0 to 192.168.1.255; likewise 192.168.*.* Matches 65536 devices from 192.168.0.0 to 192.168.255.255. This syntax is similar to the syntax used to specify BMC Defender Address Ranges.
  

• Using CIDR notation—The NMAP program accepts Classless Inter-Domain Routing notation, where a slash qualifier follows a base IP address.

  Information192.168.1.1/24 matches all addresses from 192.168.1.0 to 192.168.1.255 (identical to 192.168.1.* syntax).The slash notation, appended to the address name, is followed by a decimal number of leading bits of the routing prefix.

  Information192.168.100.0/22 represents the 1024 IP addresses from 192.168.100.0 to 192.168.103.255. 
  

• Using octet ranges—A hyphenated range specifying the starting and stopping addresses of the range can specify each octet of the IP address. 

  Information192.168.1.8-10 matches 192.168.1.8, 192.168.1.9, and 192.168.1.10. Represent each octet similarly. 

  InformationThe specification 192.168.3-4.5-6 represents 192.168.3.5, 192.16.3.6, 192.168.4.5 and 192.168.4.6.
  

• Using lists—You can simply enumerate values with commas associated with each octet. 

  Information192.168.1.1,2,3 matches 192.168.1.1, 192.168.1.2, and 192.168.1.3. Each octet can be similarly represented, and this notation can be used with asterisks.

  Information192.168.1,2,3.* matches all the devices on the 192.168.1, 192.168.2, and 192.16.3 subnets.
  

Additional flexibility (including some syntax that is particularly obscure) can be found on the nmap.org website, for instance, matching ranges of addresses residing in external files.