Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

Broadcast ping options

To increase the number of ICMP echo requests, use the script argument broadcast-ping.num_probes:

# nmap --script broadcast-ping --script-args broadcast-ping.num_probes=5  

When scanning large networks, it might be useful to increase the timeout limit, using --script-args broadcast-ping.timeout=<time in ms>, to avoid missing hosts with bad latency:

# nmap --script broadcast-ping --script-args broadcast-ping.timeout=10000  

You can specify the network interface using broadcast-ping.interface. If you don't specify an interface, broadcast-ping will send probes using all of the interfaces with an IPv4 address:

# nmap --script broadcast-ping --script-args broadcast-ping.interface=wlan3