本节书摘来自异步社区《Nmap渗透测试指南》一书中的第6章6.8节目标主机随机排序，作者 商广明,更多章节内容可以访问云栖社区“异步社区”公众号查看。

6.8　目标主机随机排序

使用--randomize-hosts选项就可以对目标主机的顺序进行随机的排序，最多可达8096个主机。单方面使用这个选项对防火墙/IDS逃逸的效果不大，如果配合时间选项则会有很好的效果。

root@Wing:~# nmap --randomize-hosts 192.168.126.1-200Starting Nmap 6.40 ( http://nmap.org ) at 2014-06-12 15:05 CSTNmap scan report for 192.168.126.2Host is up (0.00028s latency).All 1000 scanned ports on 192.168.126.2 are closedMAC Address: 00:50:56:F1:06:20 (VMware)Nmap scan report for 192.168.126.1Host is up (0.00039s latency).All 1000 scanned ports on 192.168.126.1 are filteredMAC Address: 00:50:56:C0:00:08 (VMware)Nmap scan report for 192.168.126.131Host is up (0.00031s latency).Not shown: 977 closed portsPORT　　 STATE SERVICE21/tcp　 open　ftp22/tcp　 open　ssh23/tcp　 open　telnet25/tcp　 open　smtp53/tcp　 open　domain80/tcp　 open　http111/tcp　open　rpcbind139/tcp　open　netbios-ssn445/tcp　open　microsoft-ds512/tcp　open　exec513/tcp　open　login514/tcp　open　shell1099/tcp open　rmiregistry1524/tcp open　ingreslock2049/tcp open　nfs2121/tcp open　ccproxy-ftp3306/tcp open　mysql5432/tcp open　postgresql5900/tcp open　vnc6000/tcp open　X116667/tcp open　irc8009/tcp open　ajp138180/tcp open　unknownMAC Address: 00:0C:29:E0:2E:76 (VMware)Nmap scan report for 192.168.126.130Host is up (0.0000040s latency).All 1000 scanned ports on 192.168.126.130 are closedNmap done: 200 IP addresses (4 hosts up) scanned in 5.46 secondsroot@Wing:~#