ICMP Echo Probe Module - zmap/zmap GitHub Wiki

While ZMap performs TCP SYN scans by default, it also supports ICMP echo request scans in which an ICMP echo request packet is sent to each host and the type of ICMP response received in reply is denoted. An ICMP scan can be performed by selecting the icmp_echoscan scan module similar to the following:

$ zmap --probe-module=icmp_echoscan