> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/reconnaissance/active-reconnaissance-approach/nmap/version-detection.md).

# Version Detection

The version Detection feature in Nmap helps identify services and versions running on open ports. To perform service and version detection, the `-sV` option must be used alongside the TCP Connect Scan. This option probes open ports to determine the service and version information.

**1. Basic Service Version Detection**

```bash
nmap -sV 192.168.1.1
```

This command scans the IP address `192.168.1.1` and attempts to identify the service and version running on its open ports.

**2. Set Version Intensity**

```bash
nmap -sV --version-intensity 5 192.168.1.1
```

```bash
nmap -v -n -sV --version-intensity 5 192.168.1.1
```

```bash
nmap -v -n -sT -sV --version-intensity 5 192.168.1.0/24
```

These commands scan the specified IP addresses and set the version detection intensity level to **5** for more detailed service identification.

**3. Use Version Light**

```bash
nmap -sV --version-light 192.168.1.1
```

This command scans the IP address `192.168.1.1`, limiting the version detection to the most likely probes with an intensity level of **2**, ensuring a faster scan with reduced network overhead.

**4. Use Version All**

```bash
nmap -sV --version-all 192.168.1.1
```

This command performs an exhaustive version detection scan on `192.168.1.1`, using all available probes with an intensity level of **9**, ensuring maximum accuracy in service identification.