egghelp/eggheads community

filter out ports + state

2007-02-28T11:55:07-04:00

Thanks guys It works now :)

Statistics: Posted by r0t3n — Wed Feb 28, 2007 11:55 am

filter out ports + state

2007-02-28T09:16:59-04:00

Using regexp:

Code:

foreach line [split $result \n] {   if {[regexp {(\d/.*?\n)} $result match port]} {           lappend ports $port    }}

Someone else can prolly give a better regex but that should grab the data you want. Then you'll have all of the data in the $ports var.

Statistics: Posted by rosc2112 — Wed Feb 28, 2007 9:16 am

filter out ports + state

2007-02-28T07:06:01-04:00

Thanks user, that filters out the (0.0.0.0) bit, but how can i get the port state and service into a list.

I tried a regexp,
It works, but it just returns the first match, i need to filter out all the ports into a list like:

set portlist {
"xxxx/tcp open/closed/filtered ????"
"iiii/tcl open/closed/filtered oooo"
}

So then i can use a foreach loop on portlist

Thanks in advance!

Statistics: Posted by r0t3n — Wed Feb 28, 2007 7:06 am

filter out ports + state

2007-02-27T11:54:29-04:00

Code:

regexp -line {^Interesting ports on <([^>]+)> \(([^)]+)\)} $result x name ip

Statistics: Posted by user — Tue Feb 27, 2007 11:54 am

filter out ports + state

2007-02-27T10:08:50-04:00

Im using nmap to do portscan's.

I use:

Code:

set result "[exec nmap -sT -P0 -p  ]"

The return result from nmap is:

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2007-02-27 08:53 EST
Interesting ports on (0.0.0.0):
PORT STATE SERVICE
1080/tcp closed socks
8080/tcp closed http-proxy
????/??? open/closed ????

Nmap finished: 1 IP address (1 host up) scanned in 0.018 seconds

I need to filter out the:
resolved.hostname (0.0.0.0)
and the port, state, and service name for each port

How can i do this, a simple regexp or a few lrange's or something?

Thanks in advance!

Statistics: Posted by r0t3n — Tue Feb 27, 2007 10:08 am