Summary
This check tries to determine whether a remote host is up (alive).
Several methods are used for this depending on configuration of this check.
Insight
The available methods might fail for the following reasons:
- ICMP: This might be disabled for a environment and would then cause false negatives as hosts are believed to be dead that actually are alive.
In case it is configured that hosts are never marked as dead, this can cause considerable timeouts and therefore a long scan duration in case the hosts are in fact not available.
Detection
Whether a host is up can be detected in 3 different ways:
- A ICMP message is sent to the host and a response is taken as alive sign.
- An ARP request is sent and a response is taken as alive sign.
- A number of typical TCP services are tried and their presence is taken as alive sign.
None of the methods is failsafe. It depends on network and/or host configurations whether they succeed or not. Both, false positives and false negatives can occur.
Therefore the methods are configurable.
If you select to not mark unreachable hosts as dead, no alive detections are excecuted and the host is assumed to be available for scanning.