Re: How to aggregate output of NMAP

Quoting Mike Brentlinger (mdbrentlinger_at_hotmail.com):
> off the top of my head... how bout perl
>
> open (EP,"c:/nmap_output.txt");
> while (<EP>) {
> chomp;
> if (/Interesting ports on/) {
> print "$_\n";
> }
> if (/ftp/) {
> print "$_\n";
> }
> }
>

Or using with a regexp for servises to look for:

#!/usr/bin/perl -w

$NmapLog = './bla';
$look4 = qr/ftp|http|echo/;

open (IN, $NmapLog) or die "open $NmapLog err: $!\n";
while (<IN>) {
  chomp;
  $ip = $1 if /^Interesting\sports\s.*\((.*)\):/;
  print "$ip: $_\n" if /$look4/;
}
close IN;

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Feb 05 2002