Index: output.cc
===================================================================
--- output.cc	(revision 9332)
+++ output.cc	(working copy)
@@ -1228,10 +1228,31 @@
  log_flush_all();
 }
 
+//A simple helper function for doscaninfo handles the c14n of o.scanflags
+static void doscanflags(){
+    int vals[]={0x1, 0x2, 0x4, 0x8, 0x10, 0x20, 0x40, 0x80};
+    char *flags[]={
+      "FIN", "SYN", "RST", "PSH", "ACK", "URG", "ECE", "CWR"
+    };
+    if(o.scanflags!=-1){
+      log_write(LOG_XML, "scanflags=\"");
+      for(int i=0;i<8;i++){
+        if(vals[i]==(1<<i &o.scanflags)){
+          log_write(LOG_XML, "%s",flags[i]);
+        }
+      }
+      log_write(LOG_XML, "\"");
+    }
+}
+
 /* Simple helper function for output_xml_scaninfo_records */
 static void doscaninfo(const char *type, const char *proto, unsigned short *ports, 
 		  int numports) {
-  log_write(LOG_XML, "<scaninfo type=\"%s\" protocol=\"%s\" numservices=\"%d\" services=\"", type, proto, numports);
+  log_write(LOG_XML, "<scaninfo type=\"%s\" ", type);
+  if(strncmp(proto,"tcp",3)==0){
+	doscanflags();
+  }
+  log_write(LOG_XML, " protocol=\"%s\" numservices=\"%d\" services=\"", proto, numports);
   output_rangelist_given_ports(LOG_XML, ports, numports);
   log_write(LOG_XML, "\" />\n");
 }