UDP services are invisible to TCP scans. -sU sends UDP packets and infers port state from ICMP unreachable responses (or lack thereof). Much slower than TCP scanning. Essential for finding DNS and NTP servers.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.