This is a draft cheat sheet. It is a work in progress and is not finished yet.
Base Options
-h |
--help |
show this help |
-v |
--version |
show version |
-c |
--count |
packet count |
-i |
--interval |
wait (uX for X microseconds, for example -i u1000) |
| |
--fast |
alias for -i u10000 (10 packets for second) |
| |
--faster |
alias for -i u1000 (100 packets for second) |
| |
--flood |
sent packets as fast as possible. Don't show replies. |
-n |
--numeric |
numeric output |
-q |
--quiet |
quiet |
-I |
-Interface |
interface name (otherwise default routing interface) |
-V |
--verbose |
verbose mode |
-D |
--debug |
debugging info |
-z |
--bind |
bind ctrl+z to ttl (default to dst port) |
-Z |
--unbind |
unbind ctrl+z |
| |
--beep |
beep for every matching packet received |
Mode
default mode |
|
TCP |
-0 |
--rawip |
RAW IP mode |
-1 |
--icmp |
ICMP mode |
-2 |
--udp |
UDP mode |
-8 |
--scan |
SCAN mode |
| |
|
|
-9 |
--listen |
listen mode |
|
|
IP
-a |
--spoof |
spoof source addess |
| |
--rand-dest |
random destionation address mode |
| |
--rand-source |
random source address mode |
-t |
--ttl |
ttl (default 64) |
-N |
--id |
id (default random) |
-W |
--winid |
use win* id byte ordering |
-r |
--rel |
relativize id field (to estimate host traffic) |
-f |
--frag |
split packets in more frag |
-x |
--morefrag |
set more fragments flag |
-y |
--dontfrag |
set don't fragment flag |
-g |
--fragoff |
set the fragment offset |
-m |
--mtu |
set virtual mtu, implies --frag if packet size > mtu |
-o |
--tos |
type of service (default 0x00), try --tos help |
-G |
--rroute |
includes RECORD_ROUTE option and display the route buffer |
| |
--lsrr |
loose source routing and record route |
| |
--ssrr |
strict source routing and record route |
-H |
--ipproto |
set the IP protocol field, only in RAW IP mode |
ICMP
-C |
--icmptype |
icmp type (default echo request) |
-K |
--icmpcode |
icmp code (default 0) |
| |
--force-icmp |
send all icmp types (default send only supported types) |
| |
--icmp-gw |
set gateway address for ICMP redirect (default 0.0.0.0) |
| |
--icmp-ts |
Alias for --icmp --icmptype 13 (ICMP timestamp) |
| |
--icmp-addr |
Alias for --icmp --icmptype 17 (ICMP address subnet mask) |
| |
--icmp-help |
display help for others icmp options |
|
|
UDP/TCP
-s --baseport |
base source port (default random) |
|
