By default it uses ICMP to discover if IP is responding, SNMP to get the details about the node (description, etc.). you can use ARP table of a neighbor router to determine what IP addresses are active scan in a case that you can't use ICMP from some reason.
↧