Searching a service using port scan from several subnets
 

Hi,

In my organization, we have different subnets. I don't know on which machine a particular service is running. It can be in different subnet than my source machine(from which machine I am trying to find out the machine IP & port number on which that service is running).

I know "nmap" can help me to port scan the service for a particular network(e.g like: nmap -PN <network-address/subnet-mask>

Is possible to use "nmap" in smarter way so that it can find all the subnets dynamically from routing table of every the routers & do the port scanning simultaneously to discover the services?

Is any other tool available to fulfill my requirement?

Regards,
Kaustuv

how do you suppose you'll get the routing tables from the routers?? That's no mean feat.

There are SNMP based tools that can do network discovery. Search google for SNMP tools.

You'll need of course the community names of your routers.