ZMap

Spec sheet

Purpose

ZMap is a fast, stateless, single-packet network scanner designed for Internet-wide network surveys.Read 8 Oct 2026 · github.com

Intended users

The project describes ZMap as a tool for Internet-wide network surveys and lists research among the repository topics.Read 8 Oct 2026 · github.com

Platforms

The README says ZMap operates on GNU/Linux, Mac OS and BSD, and that the latest stable release supports Linux, macOS and BSD.Read 8 Oct 2026 · github.com

Support

The README directs users to its FAQ and GitHub Discussions for questions, and asks users not to open issues for usage or support questions.Read 8 Oct 2026 · github.com

License

The repository provides ZMap under the Apache License, Version 2.0, whose license text grants a no-charge, royalty-free copyright license subject to its terms.Read 8 Oct 2026 · github.com

Ethical scanning

The project cautions that Internet-wide scans can have serious ethical and operational implications and advises scanning slowly and providing an opt-out for network operators.Read 8 Oct 2026 · github.com

High-speed scanning

With a 10gigE connection and netmap or PF_RING, ZMap can scan the IPv4 address space in under five minutes.Read 8 Oct 2026 · github.com

Installation

The project documents installation through package managers or from source, including Debian or Ubuntu packages and macOS Homebrew or MacPorts.Read 8 Oct 2026 · github.com

Intended audience

The project describes its collection of open-source tools as intended for large-scale studies of hosts and services on the public Internet.Read 8 Oct 2026 · zmap.io

Operating systems

ZMap operates on GNU/Linux, macOS, and BSD.Read 8 Oct 2026 · github.com

Privileges

The README's example scan requires root privileges.Read 8 Oct 2026 · github.com

Probe support

ZMap has probe modules for TCP SYN scans, ICMP, DNS queries, UPnP and BACNET, and can send UDP probes.Read 8 Oct 2026 · github.com

Probe types

ZMap has implemented probe modules for TCP SYN scans, ICMP, DNS queries, UPnP, and BACNET, and can send many UDP probes.Read 8 Oct 2026 · github.com

Project

The ZMap Project is a collection of open source measurement tools for large-scale studies of hosts and services on the public Internet.Read 8 Oct 2026 · zmap.io

Project tools

The project also lists ZDNS for DNS lookups, LZR for protocol identification, and ZLint for X.509 certificate checks.Read 8 Oct 2026 · zmap.io

Related scanner

ZGrab is the project's stateful application-layer scanner and supports protocols including HTTP, HTTPS, SSH, SMTP, Modbus and BACNET.Read 8 Oct 2026 · zmap.io

Related tool

The project describes ZGrab as a stateful application-layer scanner that can perform handshakes and collect service data from hosts found by ZMap.Read 8 Oct 2026 · zmap.io

Requirements

The README says a simple scan of the IPv4 space requires root privileges.Read 8 Oct 2026 · github.com

Scan speed

The README says ZMap can scan the public IPv4 address space on one port in under 45 minutes on a typical gigabit desktop, or in under five minutes with 10gigE and netmap or PF_RING.Read 8 Oct 2026 · github.com

Scanning guidance

The README warns that Internet-wide scanning can have ethical and operational implications and advises scanning as slowly as necessary and providing network operators a way to opt out.Read 8 Oct 2026 · github.com

Workflow

The project describes using ZGrab with ZMap in measurement pipelines for more involved scans such as banner grabs or TLS handshakes.Read 8 Oct 2026 · github.com

Where Specifiction places it

• Port Scanner Software#26 of 266.8