# 使用 Homebrew, apk, apt, dnf, MacPorts, Nix, pacman 安装 zmap

查看 zmap 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:zmap
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install zmap
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install zmap
```

  证据: MacPorts ports tree: net/zmap/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add zmap
```

  证据: Alpine Linux edge package indexes: zmap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install zmap
```

  证据: Debian stable package indexes: zmap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install zmap
```

  证据: Fedora Rawhide package metadata: zmap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#zmap
```

  证据: nixpkgs package indexes: pkgs/by-name/zm/zmap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S zmap
```

  证据: Arch Linux sync databases: zmap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## 软件包事实

- **软件包键:** brew:zmap
- **软件包管理器:** Homebrew
- **版本:** 4.4.0
- **来源摘要:** Network scanner for Internet-wide network studies
- **主页:** <https://zmap.io>
- **仓库:** <https://github.com/zmap/zmap>
- **最后更新:** 2026-05-29T09:12:11Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- zblocklist (别名)
- ziterate (别名)
- zmap (别名)
- ztee (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 4.4.0
## 项目历史与用法

ZMap is a fast single-packet Internet scanner created for large-scale network measurement. Its signature achievement was making a single-port scan of the public IPv4 address space feasible from one machine in under 45 minutes, then pushing the technique into both academic measurement and commercial attack-surface monitoring.

### 项目历史

The zmap/zmap repository was created in January 2013, and the project debuted publicly with the 2013 USENIX Security paper by Zakir Durumeric, Eric Wustrow, and J. Alex Halderman at the University of Michigan. The paper introduced ZMap as a modular open-source scanner designed for Internet-wide surveys, not host-by-host penetration testing.

The ZMap Project site describes the broader project as starting in 2013 with ZMap, followed a year later by ZGrab for application-layer scanning. That suite expanded into a family of measurement tools and libraries for hosts, services, DNS, TLS, and Web PKI research.

In 2014, the Zippier ZMap work described optimizations for 10 Gbps scanning, including parallelized address generation, improved blacklisting, and zero-copy packet I/O. The later Ten Years of ZMap paper documents how ZMap's packet construction, address generation, and operational behavior changed as maintainers learned from real Internet scanning.

### 采用历史

ZMap's adoption is unusually well documented. The 2024 Ten Years of ZMap paper says that since the 2013 release, networking and security researchers used the scanner in hundreds of research papers and that security companies built products on top of it for attack-surface and dependency monitoring.

The same work notes a darker adoption path: ZMap's speed made it useful to attackers as well as defenders. That dual-use reality shaped the project's attention to blocklists, scan etiquette, packet behavior, and the broader ethics of Internet-wide measurement.

### 使用方式

ZMap is used when the question is about a service across the Internet rather than all services on one host. A user selects a probe module and target port, supplies allow/block-list policy and rate limits, then pipes responsive hosts to downstream tooling such as ZGrab for protocol handshakes or to custom analysis pipelines.

Operationally, good use means rate-limiting, honoring exclusion lists, using clear source identification, and treating scan results as sensitive measurement data. ZMap is powerful enough that responsible configuration is part of the tool's practical meaning.

### 为什么软件包爱好者会关心

ZMap is one of the canonical research-to-package success stories in security tooling. It compressed a job that once required weeks or many machines into a Unix-installable scanner, which changed the ergonomics of Internet measurement.

For package nerds, it also anchors a recognizable ecosystem: zmap for fast probes, zgrab for application-layer collection, zdns for DNS measurement, zcrypto for protocol parsing, and zlint for Web PKI linting.

### 时间线

- 2013-01-23: The zmap/zmap GitHub repository is created.
- 2013-08: ZMap is presented at USENIX Security 13.
- 2014-08: Zippier ZMap presents 10 Gbps Internet-wide scanning optimizations.
- 2014: The ZMap Project releases ZGrab for application-layer scanning.
- 2024-11: Ten Years of ZMap analyzes a decade of adoption and operational evolution.

### Related projects

- Nmap is the classic host and network scanner that ZMap is often contrasted with for Internet-wide single-port scans.
- ZGrab, ZDNS, ZCrypto, ZLint, and Censys are closely related ZMap ecosystem projects and downstream uses.
- Masscan is an adjacent high-speed scanner in the same broad space.

### 来源

- <https://api.github.com/repos/zmap/zmap>
- <https://github.com/zmap/zmap>
- <https://par.nsf.gov/servlets/purl/10553593>
- <https://www.usenix.org/conference/usenixsecurity13/technical-sessions/paper/durumeric>
- <https://www.usenix.org/conference/woot14/workshop-program/presentation/adrian>
- <https://zmap.io/about>


## 安全说明

broad file, network, media, or database tool signal.

- **Geiger 风险:** blue / 中
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/zmap/zmap.conf, /etc/zmap/blacklist.conf
## 其他软件包管理器记录

- Debian apt - zmap - 2.1.1-2.1+b1: normalized package name match | Debian stable package indexes: zmap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | network scanner for researchers | https://zmap.io/
- Nix - zmap: normalized package name match | nixpkgs package indexes: pkgs/by-name/zm/zmap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - zmap - 2.1.1-2.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: zmap from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | network scanner for researchers | https://zmap.io/
- apk - zmap - 4.3.4-r0: normalized package name match | Alpine Linux edge package indexes: zmap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | High performance internet scanner | https://www.zmap.io/
- apk - zmap-doc - 4.3.4-r0: normalized package name match | Alpine Linux edge package indexes: zmap-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | High performance internet scanner (documentation) | https://www.zmap.io/
- dnf - zmap - 4.4.0-4.fc45: normalized package name match | Fedora Rawhide package metadata: zmap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Network scanner for Internet-wide network studies | https://zmap.io
- pacman - zmap - 4.4.0-1: normalized package name match | Arch Linux sync databases: zmap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Fast network scanner designed for Internet-wide network surveys | https://zmap.io/
- MacPorts - zmap: normalized package name match | MacPorts ports tree: net/zmap/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/zmap.yml](https://github.com/mxcl/pkgdb/blob/main/combined/zmap.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
