OS Manuals

/usr/bin/nping

network discovery and security auditing tool

From nmap 7.94-r3 (os), captured 2026-11-05 by running nping --help (exit 0). permalink

Nping 0.7.94 ( https://nmap.org/nping )
Usage: nping [Probe mode] [Options] {target specification}

TARGET SPECIFICATION:
  Targets may be specified as hostnames, IP addresses, networks, etc.
  Ex: scanme.nmap.org, microsoft.com/24, 192.168.0.1; 10.0.*.1-24
PROBE MODES:
  --tcp-connect                    : Unprivileged TCP connect probe mode.
  --tcp                            : TCP probe mode.
  --udp                            : UDP probe mode.
  --icmp                           : ICMP probe mode.
  --arp                            : ARP/RARP probe mode.
  --tr, --traceroute               : Traceroute mode (can only be used with
                                     TCP/UDP/ICMP modes).
TCP CONNECT MODE:
   -p, --dest-port <port spec>     : Set destination port(s).
   -g, --source-port <portnumber>  : Try to use a custom source port.
TCP PROBE MODE:
   -g, --source-port <portnumber>  : Set source port.
   -p, --dest-port <port spec>     : Set destination port(s).
   --seq <seqnumber>               : Set sequence number.
   --flags <flag list>             : Set TCP flags (ACK,PSH,RST,SYN,FIN...)
   --ack <acknumber>               : Set ACK number.
   --win <size>                    : Set window size.
   --badsum                        : Use a random invalid checksum.
UDP PROBE MODE:
   -g, --source-port <portnumber>  : Set source port.
   -p, --dest-port <port spec>     : Set destination port(s).
   --badsum                        : Use a random invalid checksum.
ICMP PROBE MODE:
  --icmp-type <type>               : ICMP type.
  --icmp-code <code>               : ICMP code.
  --icmp-id <id>                   : Set identifier.
  --icmp-seq <n>                   : Set sequence number.
  --icmp-redirect-addr <addr>      : Set redirect address.
  --icmp-param-pointer <pnt>       : Set parameter problem pointer.
  --icmp-advert-lifetime <time>    : Set router advertisement lifetime.
  --icmp-advert-entry <IP,pref>    : Add router advertisement entry.
  --icmp-orig-time  <timestamp>    : Set originate timestamp.
  --icmp-recv-time  <timestamp>    : Set receive timestamp.
  --icmp-trans-time <timestamp>    : Set transmit timestamp.
ARP/RARP PROBE MODE:
  --arp-type <type>                : Type: ARP, ARP-reply, RARP, RARP-reply.
  --arp-sender-mac <mac>           : Set sender MAC address.
  --arp-sender-ip  <addr>          : Set sender IP address.
  --arp-target-mac <mac>           : Set target MAC address.
  --arp-target-ip  <addr>          : Set target IP address.
IPv4 OPTIONS:
  -S, --source-ip                  : Set source IP address.
  --dest-ip <addr>                 : Set destination IP address (used as an
                                     alternative to {target specification} ).
  --tos <tos>                      : Set type of service field (8bits).
  --id  <id>                       : Set identification field (16 bits).
  --df                             : Set Don't Fragment flag.
  --mf                             : Set More Fragments flag.
  --evil                           : Set Reserved / Evil flag.
  --ttl <hops>                     : Set time to live [0-255].
  --badsum-ip                      : Use a random invalid checksum.
  --ip-options <R|S [route]|L [route]|T|U ...> : Set IP options
  --ip-options <hex string>                    : Set IP options
  --mtu <size>                     : Set MTU. Packets get fragmented if MTU is
                                     small enough.
IPv6 OPTIONS:
  -6, --IPv6                       : Use IP version 6.
  --dest-ip                        : Set destination IP address (used as an
                                     alternative to {target specification}).
  --hop-limit                      : Set hop limit (same as IPv4 TTL).
  --traffic-class <class> :        : Set traffic class.
  --flow <label>                   : Set flow label.
ETHERNET OPTIONS:
  --dest-mac <mac>                 : Set destination mac address. (Disables
                                     ARP resolution)
  --source-mac <mac>               : Set source MAC address.
  --ether-type <type>              : Set EtherType value.
PAYLOAD OPTIONS:
  --data <hex string>              : Include a custom payload.
  --data-string <text>             : Include a custom ASCII text.
  --data-length <len>              : Include len random bytes as payload.
ECHO CLIENT/SERVER:
  --echo-client <passphrase>       : Run Nping in client mode.
  --echo-server <passphrase>       : Run Nping in server mode.
  --echo-port <port>               : Use custom <port> to listen or connect.
  --no-crypto                      : Disable encryption and authentication.
  --once                           : Stop the server after one connection.
  --safe-payloads                  : Erase application data in echoed packets.
TIMING AND PERFORMANCE:
  Options which take <time> are in seconds, or append 'ms' (milliseconds),
  's' (seconds), 'm' (minutes), or 'h' (hours) to the value (e.g. 30m, 0.25h).
  --delay <time>                   : Adjust delay between probes.
  --rate  <rate>                   : Send num packets per second.
MISC:
  -h, --help                       : Display help information.
  -V, --version                    : Display current version number.
  -c, --count <n>                  : Stop after <n> rounds.
  -e, --interface <name>           : Use supplied network interface.
  -H, --hide-sent                  : Do not display sent packets.
  -N, --no-capture                 : Do not try to capture replies.
  --privileged                     : Assume user is fully privileged.
  --unprivileged                   : Assume user lacks raw socket privileges.
  --send-eth                       : Send packets at the raw Ethernet layer.
  --send-ip                        : Send packets using raw IP sockets.
  --bpf-filter <filter spec>       : Specify custom BPF filter.
OUTPUT:
  -v                               : Increment verbosity level by one.
  -v[level]                        : Set verbosity level. E.g: -v4
  -d                               : Increment debugging level by one.
  -d[level]                        : Set debugging level. E.g: -d3
  -q                               : Decrease verbosity level by one.
  -q[N]                            : Decrease verbosity level N times
  --quiet                          : Set verbosity and debug level to minimum.
  --debug                          : Set verbosity and debug to the max level.
EXAMPLES:
  nping scanme.nmap.org
  nping --tcp -p 80 --flags rst --ttl 2 192.168.1.1
  nping --icmp --icmp-type time --delay 500ms 192.168.254.254
  nping --echo-server "public" -e wlan0 -vvv
  nping --echo-client "public" echo.nmap.org --tcp -p1-1024 --flags ack

SEE THE MAN PAGE FOR MANY MORE OPTIONS, DESCRIPTIONS, AND EXAMPLES
Options (74)
OptionDescriptionSource
--tcp-connect: Unprivileged TCP connect probe mode.help
--tcp: TCP probe mode.help
--udp: UDP probe mode.help
--icmp: ICMP probe mode.help
--arp: ARP/RARP probe mode.help
--tr, --traceroute: Traceroute mode (can only be used with TCP/UDP/ICMP modes).help
-p, --dest-port port: Set destination port(s).help
-g, --source-port portnumber: Try to use a custom source port.help
--seq seqnumber: Set sequence number.help
--flags flag: Set TCP flags (ACK,PSH,RST,SYN,FIN...)help
--ack acknumber: Set ACK number.help
--win size: Set window size.help
--badsum: Use a random invalid checksum.help
--icmp-type type: ICMP type.help
--icmp-code code: ICMP code.help
--icmp-id id: Set identifier.help
--icmp-seq n: Set sequence number.help
--icmp-redirect-addr addr: Set redirect address.help
--icmp-param-pointer pnt: Set parameter problem pointer.help
--icmp-advert-lifetime time: Set router advertisement lifetime.help
--icmp-advert-entry IP: Add router advertisement entry.help
--icmp-orig-time<timestamp> : Set originate timestamp.help
--icmp-recv-time<timestamp> : Set receive timestamp.help
--icmp-trans-time timestamp: Set transmit timestamp.help
--arp-type type: Type: ARP, ARP-reply, RARP, RARP-reply.help
--arp-sender-mac mac: Set sender MAC address.help
--arp-sender-ip<addr> : Set sender IP address.help
--arp-target-mac mac: Set target MAC address.help
--arp-target-ip<addr> : Set target IP address.help
-S, --source-ip: Set source IP address.help
--dest-ip addr: Set destination IP address (used as an alternative to {target specification} ).help
--tos tos: Set type of service field (8bits).help
--id<id> : Set identification field (16 bits).help
--df: Set Don't Fragment flag.help
--mf: Set More Fragments flag.help
--evil: Set Reserved / Evil flag.help
--ttl hops: Set time to live [0-255].help
--badsum-ip: Use a random invalid checksum.help
--ip-options hex: Set IP optionshelp
--mtu size: Set MTU.help
-6, --IPv6: Use IP version 6.help
--hop-limit: Set hop limit (same as IPv4 TTL).help
--traffic-class class: Set traffic class.help
--flow label: Set flow label.help
--dest-mac mac: Set destination mac address.help
--source-mac mac: Set source MAC address.help
--ether-type type: Set EtherType value.help
--data hex: Include a custom payload.help
--data-string text: Include a custom ASCII text.help
--data-length len: Include len random bytes as payload.help
--echo-client passphrase: Run Nping in client mode.help
--echo-server passphrase: Run Nping in server mode.help
--echo-port port: Use custom <port> to listen or connect.help
--no-crypto: Disable encryption and authentication.help
--once: Stop the server after one connection.help
--safe-payloads: Erase application data in echoed packets.help
--delay time: Adjust delay between probes.help
--rate<rate> : Send num packets per second.help
-h, --help: Display help information.help
-V, --version: Display current version number.help
-c, --count n: Stop after <n> rounds.help
-e, --interface name: Use supplied network interface.help
-H, --hide-sent: Do not display sent packets.help
-N, --no-capture: Do not try to capture replies.help
--privileged: Assume user is fully privileged.help
--unprivileged: Assume user lacks raw socket privileges.help
--send-eth: Send packets at the raw Ethernet layer.help
--send-ip: Send packets using raw IP sockets.help
--bpf-filter filter: Specify custom BPF filter.help
-v: Increment verbosity level by one.help
-d: Increment debugging level by one.help
-q: Decrease verbosity level by one.help
--quiet: Set verbosity and debug level to minimum.help
--debug: Set verbosity and debug to the max level.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.