 The host could also be too busy.OS detection and the open port list can also help in identifying systems that are likely to be idle.Another approach to identifying zombie candidates is the run the ipidseq NSE script against a host.