The best way I can think of off the top of my head is to do two
similar scans, one with a ping scan and the other looking for open
ports but without pinging (-Pn) dumping them to two different files
and do a diff between them. Granted if you have a host out there
without any ports open (or you just...

[ more ]