nmap XML output for "down" hosts on -F scans

[Andrew Smith <eurodrew555 () yahoo com au>]

Hi folks,

I'm currently working on a monitoring project using nmap as the 
scanning/discovery engine.
The XML output is being parsed and updated on a MySQL database with a 
PHP front end to display/filter the results.

Running nmap with -sP provides output of both hosts that are up and 
down, for example:

nmap -sP 192.168.2.0/24 -oX nmap-sP-192.168.2.0-24.xml

....
<host><status state="down" reason="host-unreach"/>
<address addr="192.168.2.6" addrtype="ipv4" />
</host>
....

However, if I run nmap as:

nmap -F --script smb-os-discovery 192.168.2.0/24 -oX 
nmap-F-smb-os-discovery-192.168.2.0-24.xml

then I only get results for hosts that are "up".

I have tried using debug and verbosity (-d9 -vvv) but this doesn't 
provide any information about "down" hosts.

I'm working around this at the moment by running a -sP first pass 
followed by a -F second pass but it would be more efficient (and reduce 
the load on the system) by being able to get the status of all hosts in 
the -F pass.

If this feature isn't available, is it possible to request it to be 
added to the next version of nmap please?

Thanks for your time,
Andrew
Send instant messages to your online friends http://au.messenger.yahoo.com 

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/