Nmap Security Scanner Ref Guide Security Lists Security Tools Site News Advertising About/Contact Credits Sponsors |
Intro | Reference Guide | Book | Install Guide
Download | Changelog | Zenmap GUI | Docs
Bug Reports | OS Detection | Propaganda | Related Projects
In the Movies | In the News
Normal Output (`-oN`)
| Chapter 13. Nmap Output Formats |
## Normal Output (`-oN`) Normal output is printed to a file when the `-oN` option is specified with a filename argument. It is similar to interactive output, except that notes which lose relevance once a scan completes are removed. It is assumed that the file will be read after Nmap completes, so estimated completion times and new open port alerts are redundant to the actual completion time and the ordered port table. Since output may be saved a long while and reviewed among many other logs, Nmap prints the execution time, command-line arguments, and Nmap version number on the first line. A similar line at the end of a scan divulges final timing and a host count. Those two lines begin with a pound character to identify them as comments. If your application must parse normal output rather than XML/grepable formats, ensure that it ignores comments that it doesn't recognize rather than treating them as an error and aborting. Example 13.7, “A typical example of normal output” is a typical example of normal output. Note that `-oN -` was used to prevent interactive output and send normal output straight to stdout. Example 13.7. A typical example of normal output
    # nmap -T4 -A -p- -oN - scanme.nmap.org
    # nmap 3.77 scan initiated Sun Nov 21 7:55:07 2004 as: nmap -T4 -A -p-↵
     -oN - scanme.nmap.org
    Interesting ports on scanme.nmap.org (205.217.153.62):
    (The 65530 ports scanned but not shown below are in state: filtered)
    PORT    STATE  SERVICE VERSION
    22/tcp  open   ssh     OpenSSH 3.1p1 (protocol 1.99)
    25/tcp  open   smtp    qmail smtpd
    53/tcp  open   domain  ISC BIND 9.2.1
    80/tcp  open   http    Apache httpd 2.0.39 ((Unix) mod_perl/1.99_07-dev↵
     Perl/v5.6.1)
    113/tcp closed auth
    Device type: general purpose
    Running: Linux 2.4.X|2.5.X
    OS details: Linux 2.4.0 - 2.5.20, Linux 2.4.18 - 2.4.20
    Uptime 9.105 days (since Fri Nov 12 5:34:59 2004)

    # Nmap run completed at Sun Nov 21 8:06:07 2004 -- 1 IP address (1 host up)↵
     scanned in 660.397 seconds
Interactive Output |  | $crIpT kIddI3 0uTPut (`-oS`)
| [ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]