如何在nmap输出里过滤出ip来呢？

sbuddy

[root@serv]# nmap -sP 192.168.1.1-100

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2010-01-11 04:20 CST
Host 192.168.1.64 appears to be up.
MAC Address: 00:24:1D:29:9B:7B (Unknown)
Host 192.168.1.65 appears to be up.
MAC Address: 00:24:1B:29:4F:6B (Unknown)
Nmap finished: 11 IP addresses (2 host up) scanned in 13.297 seconds

只想把192.168.1.64这样的ip取出来，如何做呢？

寂寞烈火

try:
awk '$1=="Host"{print $2;exit}'

[ 本帖最后由 寂寞烈火 于 2010-1-10 16:03 编辑 ]

sbuddy

谢谢，但不行啊，nmap有时的输出是非规则的，简单显示第二个字段不太可行。比如下面


Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2010-01-11 04:54 CST
Host 192.168.1.1 appears to be up.
MAC Address: 00:66:B6:EC:XB:BB (Cisco-Linksys)
Host serv1.local (192.168.1.21) appears to be up.
Host 192.168.1.68 appears to be up.
MAC Address: 00:66:1D:29:XB:7B (Unknown)
Nmap finished: 70 IP addresses (3 hosts up) scanned in 27.519 seconds

sbuddy

其实要把类似下面的ip过滤出来。

Host 192.168.1.1 appears to be up
Host serv1 (192.168.1.21) appears to be up
Host serv2.local（192.168.1.64) appears to be up
Host 192.168.1.68 appears to be up

寂寞烈火

你要的那段ip是第一出线的那个吗？

sbuddy

就是把任意一行里的ip过滤出来。

寂寞烈火

try
sed '/^Host .* to be up/s/.*\([0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\).*/\1/'

sbuddy

谢谢！ 我也行了。用下面的。

| egrep -o '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'