Actually, if you run asmscan as root, it pings the target host first to estimate the timeout value. Otherwise you're out of luck, because you need root privileg

Actually, if you run asmscan as root, it pings the target host first to estimate the timeout value. Otherwise you're out of luck, because you need root privileges to send raw packets. IMO, it is quite fast with this feature. You're right, I wrote this for educational purposes. nmap is hard to beat ;)