Scandiff Find the differences between two nmap scan logs
Download

Scandiff Ranking & Summary

Scandiff Tags

scan find difference scanner nmap scan log nmap log

Scandiff Description

Find the differences between two nmap scan logs Scandiff is an open source utility used for displaying the differences between two machine readable nmap scan logs (both grep and XML output formats). The scans are checked not only for changes in hosts discovered and port states, but also for changes in DNS hostname, OS fingerprint and more. The results can be presented as HTML or plain ASCII text allowing easy integration into HTML based dashboards or email notification systems. The goal for scandiff was to be fast and use a minimal amount of memory. These qualities are essential for processing large scan files (10Mb to 50Mb) that can quickly consume a system's memory if not handled efficiently.NOTE: Scandiff is licensed and distributed under the terms of the BSD License. What's New in This Release: · BUGFIX: Host status is now checked when hosts existing in both scanlogs. The lack of this check would result in hosts in xml (typically) scanlogs being categorized as 'changed' with a host status change from H_UP -> D_DOWN instead of reporting as 'missing'. · BUGFIX: Return exit status code 0, instead of 2, when both scanlogs exist, but contain no hosts. · BUGFIX: Added 'open|filtered' and 'closed|filtered' port states. · BUGFIX: Repaired call to ferror in input_grep module. · BUGFIX: changed input_grep to use a case-insensitive string comparison for checking the Nmap version 3.95 starting comment line.

Scandiff Related Software