Think nmap for rf