Re: How to aggregate output of NMAP

[Vladimir Parkhaev <vladimir () arobas net>]

Quoting Mike Brentlinger (mdbrentlinger () hotmail com):
> off the top of my head... how bout perl
>
>   open (EP,"c:/nmap_output.txt");
>   while (<EP>) {
>       chomp;
>       if (/Interesting ports on/) {
>           print "$_\n";
>           }
>       if (/ftp/) {
>           print "$_\n";
>           }
>   }

Or using with a regexp for servises to look for:

#!/usr/bin/perl -w

$NmapLog = './bla';
$look4   = qr/ftp|http|echo/;

open (IN, $NmapLog) or die "open $NmapLog err: $!\n";
while (<IN>) {
  chomp;
  $ip = $1 if /^Interesting\sports\s.*\((.*)\):/;
  print "$ip: $_\n" if /$look4/;
}
close IN;


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/