Nmap

Nmap is a great tool for network forensics. Remember to use this tool with digression since it can probe ranges of IP/Subnets and ports opened or filtered on them. Rule of thumbs is it's not nice to run on ranges not on your network or not owned by you.

Useful commands:

nmap -sS -PS80 -iR 0 -p 80 65.44.66.96/27 –exclude 65.44.66.96 , 65.44.66.120-127

nmap -sP 192.168.1.0/24