NMAP

Scan a network for open ports
Aggressive

namp -v -A -T4 -oX nmap-scan.xml <subnet>

Less aggressive

namp -v -A -T3 -oX nmap-scan.xml <subnet>