Passive ZAP scanning