Reporting on hosts which are down in a port scan

["null yathrib" <yathrib.public () gmail com>]

How can I show "down" hosts in the output of a port scan which
performs an initial ping?

That is, instead of (no status in grep-able or XML output):

    # Nmap 4.52 scan initiated [...] as: nmap -oG - -PE -p22
--max_rtt_timeout=200 -v 1.1.1.1
    # Ports scanned: TCP(1;22) UDP(0;) PROTOCOLS(0;)
    # Nmap done at [...] -- 1 IP address (0 hosts up) scanned in 0.427 seconds

I would like to see:

    # Nmap 4.52 scan initiated [...] as: nmap -oG - -PE -p22
--max_rtt_timeout=200 -v 1.1.1.1
    # Ports scanned: TCP(1;22) UDP(0;) PROTOCOLS(0;)
    Host: 1.1.1.1 ()        Status: Down
    # Nmap done at [...] -- 1 IP address (0 hosts up) scanned in 0.427 seconds

Hosts which are down *are* reported in a ping scan (-sP), though:

    # Nmap 4.52 scan initiated [...] as: nmap -oG - -PE -sP
--max_rtt_timeout=200 -v 1.1.1.1
    # Ports scanned: TCP(0;) UDP(0;) PROTOCOLS(0;)
    Host: 1.1.1.1 ()        Status: Down
    # Nmap done at [...] -- 1 IP address (0 hosts up) scanned in 0.441 seconds

--
yathrib

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org