Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Whats the best way to find printers in my network with nmap? Is it possible to save the printers ip to a file?

share|improve this question
This page may help you. It has worked for me in the past. irongeek.com/i.php?page=security/networkprinterhacking –  ThaKidd Jun 25 '10 at 1:46

2 Answers 2

up vote 9 down vote accepted

If you're leery of doing OS Fingerprinting for some reason, you can do a more targeted port-scan:

nmap -p 9100,515,631 -oX printers.xml

That'll scan for ports common to printers and printing systems.

  • 9100 = the RAW port for most printers, also known as the direct-IP port
  • 515 = the LPR/LPD port, for most printers, as well as older print-servers
  • 631 = the IPP port, for most modern printers, and CUPS-based print-server

Output is in XML.

share|improve this answer
Your answer was very helpful! –  Ryan Tenney Jan 22 '11 at 3:28
This did not work for me. –  moose Sep 3 '14 at 20:56

The easiest way is to scan with nmap -O: nmap will usually correctly determine if a machine is a printer or not based on the OS.

nmap -O -oG - | grep printer >> outfile

Should make it one entry per line and dump it to a file called "outfile". Obviously change the ip range to whatever range you're scanning

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.