¨UDP Scanning (-U)
 Sends a UDP packet to target ports to determine if a UDP
 service is listening
 If the target system returns an ICMP Port Unreachable
 message, the target port is closed. Otherwise,
 the target port is assumed to be open.
 Unreliable since there may be false positives
 Client program of discovered open port is used to verify
 service
 ¨Ping (-sP)
 Sends ICMP echo request packets to every machine on the
 target network, allowing for locating live
 hosts. This isnt port scanning; its network
 mapping.
 Can use TCP packets instead of ICMP to conduct Ping
 sweep
 ¨