Re: How to aggregate output of NMAP

From: Vladimir Parkhaev (vladimir@arobas.net)
Date: 02/05/02 

Date: Tue, 5 Feb 2002 16:03:12 -0500
From: Vladimir Parkhaev <vladimir@arobas.net>
To: Mike Brentlinger <mdbrentlinger@hotmail.com>

Quoting Mike Brentlinger (mdbrentlinger@hotmail.com):
> off the top of my head... how bout perl
>
> open (EP,"c:/nmap_output.txt");
> while (<EP>) {
> chomp;
> if (/Interesting ports on/) {
> print "$_\n";
> }
> if (/ftp/) {
> print "$_\n";
> }
> }
>

Or using with a regexp for servises to look for:

#!/usr/bin/perl -w

$NmapLog = './bla';
$look4 = qr/ftp|http|echo/;

open (IN, $NmapLog) or die "open $NmapLog err: $!\n";
while (<IN>) {
  chomp;
  $ip = $1 if /^Interesting\sports\s.*\((.*)\):/;
  print "$ip: $_\n" if /$look4/;
}
close IN;

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: Wardialing
    ... >>> achieving the connection with the modem. ... >>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)