Searching a service using port scan from several subnets
In my organization, we have different subnets. I don't know on which machine a particular service is running. It can be in different subnet than my source machine(from which machine I am trying to find out the machine IP & port number on which that service is running).
I know "nmap" can help me to port scan the service for a particular network(e.g like: nmap -PN <network-address/subnet-mask>
Is possible to use "nmap" in smarter way so that it can find all the subnets dynamically from routing table of every the routers & do the port scanning simultaneously to discover the services?
Is any other tool available to fulfill my requirement?