Simple Nmap XML output usage example

[Fyodor <fyodor () insecure org>]

I usually don't forward messages from other lists here, but I think
this is a good demonstration of how easily the Nmap XML output can be
parsed.  I encourage authors of programs which read Nmap output to
consider using the XML output format.  The format is more stable,
extensible, and contains a bit more information than the others.

Cheers,
-F

----- Forwarded message from stephen <stephen () dcode net> -----

Date: Wed, 6 Feb 2002 10:41:21 +0000 (GMT)
From: stephen <stephen () dcode net>
To: "R. DuFresne" <dufresne () sysinfo com>
Cc: Carmelo Floridia <cfloridia () lex unict it>,
        <PEN-TEST () securityfocus com>
Subject: Re: How to aggregate output of NMAP


If you use Nmap's XML output option, you can easily parse the information
with a perl script using the XML::Simple module.  For example, to read the
number of hosts up:

#!/usr/bin/perl

use XML::Simple;

my $file=$ARGV[1];
my $xs=XML::Simple->new();

my $doc = $xs->XMLin($file);

my $up = $doc->{runstats}->{hosts}->{up};



Stephen de Vries



On Tue, 5 Feb 2002, R. DuFresne wrote:

> How about traditional unix tools such as grep/egrep, awk, wc?
>
> Thanks,
>
> Ron DuFresne
>
> On Tue, 5 Feb 2002, Carmelo Floridia wrote:
>
> > I used nmap -sS -p80,25,110,21 172.31.*.* -oN output
> > do you know if exist any tool to summarize the result in order to know (for
> > example):
> >
> > how may WEB answered
> > who are the web server
> >
> > hom many FTP
> > who are ftp
> >
> > I used nlog....any other tool?
> >
> >
> >
> > > -----Messaggio originale-----
> > > Da: Tim Russo [mailto:trusso () wireguided com]
> > > Inviato: martedì 6 novembre 2001 4.30
> > > A: PEN-TEST () securityfocus com
> > > Oggetto: "Get out of Jail Free" client doc
> > >
> > >
> > > I am about to do a vulnerability assessment for a larger client. I want to
> > > have this client sign a document which states that I am authorized to
> > > perform this assessment and that I am not responsible for server
> > > crashes or
> > > things along that line. Does anyone know where I can get a template or an
> > > example of such a document? Thanks.
> > >
> > > -Tim
> > >
> > > __________________________________
> > > Tim Russo
> > > Email:    trusso () wireguided com
> > > Tel:              781.849.9323
> > > Fax:              781.849.0127
> > >
> > >
> > >
> > > ------------------------------------------------------------------
> > > ----------
> > > This list is provided by the SecurityFocus Security Intelligence
> > > Alert (SIA)
> > > Service. For more information on SecurityFocus' SIA service which
> > > automatically alerts you to the latest security vulnerabilities
> > > please see:
> > > https://alerts.securityfocus.com/
> >
> >
> > ----------------------------------------------------------------------------
> > This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> > Service. For more information on SecurityFocus' SIA service which
> > automatically alerts you to the latest security vulnerabilities please see:
> > https://alerts.securityfocus.com/
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>         admin & senior security consultant:  sysinfo.com
>                         http://sysinfo.com
>
> "Cutting the space budget really restores my faith in humanity.  It
> eliminates dreams, goals, and ideals and lets us get straight to the
> business of hate, debauchery, and self-annihilation."
>                 -- Johnny Hart
>
> testing, only testing, and damn good at it too!
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please see:
> https://alerts.securityfocus.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

----- End forwarded message -----

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).