TOC & Recently Viewed

Recently Viewed Topics

Scan Targets

Hostname targets that look like either a link6 target (start with the text "link6") or like one of the two IPv6 range forms can be forced to be processed as a hostname by putting single quotes around the target.

The following table explains target types, examples, and a short explanation of what happens when that target type is scanned.

Target Description

Example

Explanation

A single IPv4 address

192.168.0.1

The single IPv4 address is scanned

A single IPv6 address

2001:db8::2120:17ff:fe56:333b

The single IPv6 address is scanned

A single link local IPv6 address with a scope identifier

fe80:0:0:0:216:cbff:fe92:88d0%eth0

The single IPv6 address is scanned. Note that usage of interfaces names instead of interface indexes for the scope identifier is not support on Windows platforms

An IPv4 range

192.168.0.1-192.168.0.255

All IPv4 addresses between the start address and end address including both addresses.

An IPv4 address with one or more octets replaced with numeric ranges

192.168.0-1.3-5

The example will expand to all combinations of the values given in the octet ranges: 192.168.0.3, 192.168.0.4, 192.168.0.5, 192.168.1.3, 192.168.1.4 and 192.168.1.5

An IPv4 subnet with CIDR notation

192.168.0.0/24

All addresses within the specified subnet are scanned. The address given is not the start address. Specifying any address within the subnet with the same CIDR will scan the same set of hosts.

An IPv4 subnet with netmask notation

192.168.0.0/255.255.255.128

All addresses within the specified subnet are scanned. The address is not a start address. Specifying any address within the subnet with the same netmask will scan the same hosts

A host resolvable to either an IPv4 or an IPv6 address

www.yourdomain.com

The single host is scanned. If the hostname resolves to multiple addresses the address to scan is the first IPv4 address or if it did not resolve to an IPv4 address, the first IPv6 address.

A host resolvable to an IPv4 address with CIDR notation

www.yourdomain.com/24

The hostname is resolved to an IPv4 address and then treated like any other IPv4 address with CIDR target.

A host resolvable to an IPv4 address with netmask notation

www.yourdomain.com/255.255.252.0

The hostname is resolved to an IPv4 address and then treated like any other IPv4 address with netmask notation

The text 'link6' optionally followed by an IPv6 scope identifier

link6 or link6%16

Multicast ICMPv6 echo requests are sent out on the interface specified by the scope identifier to the ff02::1 address. All hosts that respond to the request are scanned. If no IPv6 scope identifier is given the requests are sent out on all interfaces. Note that usage of interfaces names for the scope identifier is not supported on Windows platforms

Some text with either a single IPv4 or IPv6 address within square brackets

www.tenable.com[10.0.1.1]

or

www.nessus.org[2001:db8::abcd]

The virtual server is targeted at the specific IP address within the brackets, and that host is scanned.

Copyright © 2017. Tenable Network Security, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter Continuous View, Passive Vulnerability Scanner, and Log Correlation Engine are registered trademarks of Tenable Network Security, Inc. All other products or services are trademarks of their respective owners.