the ddma component (discovery and dependency mapping advanced) of ucmdb works by scanning ranges of ip addresses within pre-set probe ip ranges, using ping, icmp echo requests and nmap to locate live ip addresses and open tcp ports, and ip address harvesting techniques by querying arp/cache tables of level 3 network devices. resulting current ip addresses are then translated into cis which function as input for deeper level discovery. the pyramid model is designed to ensure that only relevant sources are being queried, resulting in lower network and node load.