I'm fairly certain I'm trying to use this correctly, and I know I have script output in the XML. (-sC). But I always get null when I try to retrieve the scripts from Nmap::Parser::host::service.
I also get a null when I try to retrieve the pre & post scripts and host scripts too. I hard coded to ask for the nbstat, and I get a reference on the hosts that ran that scan, but the $host->service() always returns a null too.
<?xml version="1.0"?>
<?xml-stylesheet href="file:///C:/Program Files (x86)/Nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 6.25 scan initiated Mon Jun 24 15:21:58 2013 as: "C:\\Program Files (x86)\\Nmap\\nmap.exe" -iL hostlist -sC -O -sS -oA everthing sV -->
<nmaprun scanner="nmap" args=""C:\\Program Files (x86)\\Nmap\\nmap.exe" -iL hostlist -sC -O -sS -oA everthing sV" start="1372083718" startstr="Mon Jun 24 15:21:58 2013" version="6.25" xmloutputversion="1.04">
<scaninfo type="syn" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
<verbose level="0"/>
<debugging level="0"/>
<host starttime="1372083719" endtime="1372083785"><status state="up" reason="echo-reply" reason_ttl="64"/>
<address addr="172.16.116.128" addrtype="ipv4"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="998">
<extrareasons reason="resets" count="998"/>
</extraports>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 49:3f:dc:19:6d:bc:af:72:3d:6e:79:98:ce:0f:2d:9e (DSA)
2048 e4:90:0d:42:98:99:7a:c8:bd:7c:61:cb:fb:03:3c:f5 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">AAAAB3NzaC1kc3MAAACBAKN18+denCD7fZipfKabJ3XYqfaCBm6GG4LfExt6BiCzrgmyi7TIVI/VG3dARq0b9N1UZmBUcfojd+fRTZo7xKy330H6KRrPcsb7EXNpT/dxr6HCy6pqlh09CzUPV/xDJseQxugmeA9qWiUlJDV7AacRwDP+KooFByTLxiCRpWPRAAAAFQDvs6gON1FMz2SGZ/mV7QA9RHiZgQAAAIBkFRXLZN9FUiopuGqMqUBhG1U90/q/wOD9epcryfQACU8zCS5OCKB3DnII0ne1QzpyDvl4xhsba+VpqBx1ir0YlV3OstHTgKTulMMCD7gbXCYWRHVpDy6bYmGklWVFPGK86KdCTEw77bABAbk08Jrxw5bTeAQi5Vp0+iSemu7gwgAAAIBPr38cLxuE8AS64LvJw5Me2uKR4OlbZ+/c2+J4S+UZ9UcrZsrgxDao6kgLM3aXRWcrc7CxDlJi+8fAkcEl9NHtZYx+6SDsQxLkH3SyrjQmSfi66BMvoLCdK4HaQw9iYucqT9sCycAlu5IBt7n9Vqs2IFBpdbJb4NDpp7x/XwN1RA==</elem>
<elem key="fingerprint">493fdc196dbcaf723d6e7998ce0f2d9e</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAwuhSGyHgXDFt1qAORqui2j0OWcy4EmMruOFSYZT4yMQIcXZejsqYj/TATi/ljQJYZnVIxupzisLhdyhmAAz6nNyD2eRTYJjUOVyhkLO504ObwdAiWatqXoNf0A9XdY9jZLaywtEwrqYmZMSasMYqk97ZjAH+do9bCdAxfb4kWZFGV3E7N5P1QFBAL4/osE6Lx//TtttnYlv509hpMqfzNfI2pdKLnSokbnZbSQvMDYSSh+60mGJvEaQ2xsutL5gA+Xlg5oD2DlvNNeUTJliG36ht3ncJsLwBXty7L+gXY0261KYwLxvhHNhe69dlbWlEZHgzSkV2OD7LEI5yIu+BIw==</elem>
<elem key="fingerprint">e4900d4298997ac8bd7c61cbfb033cf5</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2 111/tcp rpcbind
 100000 2 111/udp rpcbind
 100024 1 615/udp status
 100024 1 618/tcp status
"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="22"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="36250"/>
<osmatch name="Linux 2.6.18 - 2.6.32" accuracy="100" line="36578">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
</os>
<uptime seconds="241844" lastboot="Fri Jun 21 20:14:01 2013"/>
<distance value="1"/>
<tcpsequence index="264" difficulty="Good luck!" values="4B151BC2,3D0401BC,4A784AB4,DA66F199,A3DFE93A,1C03A409"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="E68A856,E68A8BA,E68A920,E68A985,E68A9EA,E68AA4F"/>
<times srtt="806" rttvar="1466" to="100000"/>
</host>
<host starttime="1372083719" endtime="1372083805"><status state="up" reason="echo-reply" reason_ttl="127"/>
<address addr="172.16.116.155" addrtype="ipv4"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="984">
<extrareasons reason="resets" count="984"/>
</extraports>
<port protocol="tcp" portid="53"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="domain" method="table" conf="3"/></port>
<port protocol="tcp" portid="88"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="kerberos-sec" method="table" conf="3"/></port>
<port protocol="tcp" portid="135"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="msrpc" method="table" conf="3"/></port>
<port protocol="tcp" portid="139"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="netbios-ssn" method="table" conf="3"/></port>
<port protocol="tcp" portid="389"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="ldap" method="table" conf="3"/></port>
<port protocol="tcp" portid="445"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="microsoft-ds" method="table" conf="3"/></port>
<port protocol="tcp" portid="464"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="kpasswd5" method="table" conf="3"/></port>
<port protocol="tcp" portid="593"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="http-rpc-epmap" method="table" conf="3"/></port>
<port protocol="tcp" portid="636"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="ldapssl" method="table" conf="3"/></port>
<port protocol="tcp" portid="1025"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="NFS-or-IIS" method="table" conf="3"/></port>
<port protocol="tcp" portid="1026"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="LSA-or-nterm" method="table" conf="3"/></port>
<port protocol="tcp" portid="1028"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="unknown" method="table" conf="3"/></port>
<port protocol="tcp" portid="1039"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="sbl" method="table" conf="3"/></port>
<port protocol="tcp" portid="1048"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="neod2" method="table" conf="3"/></port>
<port protocol="tcp" portid="3268"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="globalcatLDAP" method="table" conf="3"/></port>
<port protocol="tcp" portid="3269"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="globalcatLDAPssl" method="table" conf="3"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="53"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="38493"/>
<osmatch name="Microsoft Windows XP SP2 or SP3, or Windows Server 2003" accuracy="100" line="53318">
<osclass type="general purpose" vendor="Microsoft" osfamily="Windows" osgen="XP" accuracy="100"><cpe>cpe:/o:microsoft:windows_xp</cpe></osclass>
<osclass type="general purpose" vendor="Microsoft" osfamily="Windows" osgen="2003" accuracy="100"><cpe>cpe:/o:microsoft:windows_server_2003</cpe></osclass>
</osmatch>
</os>
<distance value="2"/>
<tcpsequence index="263" difficulty="Good luck!" values="41C2B3B9,4A5653B0,3D4E6371,A5C6C92,98BA02E8,F256A0CA"/>
<ipidsequence class="Incremental" values="5CA8,5CA9,5CAA,5CAB,5CAC,5CAD"/>
<tcptssequence class="zero timestamp" values="0,0,0,0,0,0"/>
<hostscript><script id="nbstat" output="NetBIOS name: WENT2K3, NetBIOS user: <unknown>, NetBIOS MAC: 00:0c:29:fc:f1:50 (VMware)"/><script id="smb-os-discovery" output="
 OS: Windows Server 2003 3790 (Windows Server 2003 5.2)
 OS CPE: cpe:/o:microsoft:windows_server_2003::-
 Computer name: went2k3
 NetBIOS computer name: WENT2K3
 Domain name: dc.knauss.net
 FQDN: went2k3.dc.knauss.net
 NetBIOS domain name: DC
 System time: 2013-06-24T10:23:03-04:00
"><elem key="os">Windows Server 2003 3790</elem>
<elem key="lanmanager">Windows Server 2003 5.2</elem>
<elem key="domain">DC</elem>
<elem key="server">WENT2K3</elem>
<elem key="date">2013-06-24T10:23:03-04:00</elem>
<elem key="fqdn">went2k3.dc.knauss.net</elem>
<elem key="domain_dns">dc.knauss.net</elem>
<elem key="forest_dns">nil</elem>
<elem key="workgroup">nil</elem>
<elem key="cpe">cpe:/o:microsoft:windows_server_2003::-</elem>
</script><script id="smb-security-mode" output="
 Account that was used for smb scripts: guest
 User-level authentication
 SMB Security: Challenge/response passwords supported
 Message signing required
"/><script id="smbv2-enabled" output="Server doesn't support SMBv2 protocol"/></hostscript><times srtt="1156" rttvar="1022" to="100000"/>
</host>
<host starttime="1372083719" endtime="1372083784"><status state="up" reason="reset" reason_ttl="63"/>
<address addr="172.16.116.154" addrtype="ipv4"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="998">
<extrareasons reason="resets" count="998"/>
</extraports>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="59"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 eb:39:82:bc:e5:74:7e:6c:3e:89:57:ea:01:ad:91:98 (DSA)
2048 af:85:d0:65:8f:9b:3a:42:19:63:07:a2:ae:ee:62:0f (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">eb3982bce5747e6c3e8957ea01ad9198</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAw7JN0SFpV/H9ceYJ3UOn5vcEKcQyPdfSZWUl/jyfacbNmgzTs9STT6hiSxQHlASo2rayBtebRhEIOIKFNPHjspcXFU0bW/PANcrFcqtYhfo+WkI402WdyUH5A13nXmSXxinsmyWUfyhBOWjWkRFnMSiiW8f1aOJC11k37emW3KFredBy8IPIHTYFfdoGMbHBJsb9v1hM5+TK+mA9cUlR6Yv++QoUW3bQOx5mQqTtIq/Ug33kOFeAmxau0fh4tGq8nESha7xDEXZ+NPodEU9uMvpDX2MPr3p9QL77hG6vaK+994WfBSu5E2n2G6EjMn6kFzXkzWzqFzL7OK0Kcwx2SQ==</elem>
<elem key="fingerprint">af85d0658f9b3a42196307a2aeee620f</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="63"/><service name="rpcbind" method="table" conf="3"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="22"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="41462"/>
<osmatch name="Sun Solaris 11 (snv_151a) or OpenIndiana oi_147 - oi_151a" accuracy="100" line="65791">
<osclass type="general purpose" vendor="Sun" osfamily="Solaris" osgen="11" accuracy="100"><cpe>cpe:/o:sun:sunos:5.11</cpe></osclass>
<osclass type="general purpose" vendor="OpenIndiana" osfamily="OpenIndiana" accuracy="100"><cpe>cpe:/o:openindiana:openindiana</cpe></osclass>
</osmatch>
</os>
<uptime seconds="1559" lastboot="Mon Jun 24 14:58:46 2013"/>
<distance value="2"/>
<tcpsequence index="144" difficulty="Good luck!" values="1662E5F2,16658A76,1667E2B7,166A93A3,166CC272,166E7E94"/>
<ipidsequence class="Incremental" values="4303,4304,4305,4306,4307,4308"/>
<tcptssequence class="100HZ" values="23823,2382D,23837,23842,2384C,23856"/>
<times srtt="1005" rttvar="20" to="100000"/>
</host>
<host starttime="1372083719" endtime="1372083885"><status state="up" reason="reset" reason_ttl="64"/>
<address addr="172.16.116.156" addrtype="ipv4"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="975">
<extrareasons reason="resets" count="975"/>
</extraports>
<port protocol="tcp" portid="21"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ftp" method="table" conf="3"/><script id="ftp-anon" output="Anonymous FTP login allowed (FTP code 230)"/></port>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA)
2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">600fcfe1c05f6a74d69024fac4d56ccd</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAstqnuFMBOZvO3WTEjP4TUdjgWkIVNdTq6kboEDjteOfc65TlI7sRvQBwqAhQjeeyyIk8T55gMDkOD0akSlSXvLDcmcdYfxeIF0ZSuT+nkRhij7XSSA/Oc5QSk3sJ/SInfb78e3anbRHpmkJcVgETJ5WhKObUNf1AKZW++4Xlc63M4KI5cjvMMIPEVOyR3AKmI78Fo3HJjYucg87JjLeC66I7+dlEYX6zT8i1XYwa/L1vZ3qSJISGVu8kRPikMv/cNSvki4j+qDYyZ2E5497W87+Ed46/8P42LNGoOV8OcX/ro6pAcbEPUdUEfkJrqi2YXbhvwIJ0gFMb6wfe5cnQew==</elem>
<elem key="fingerprint">5656240f211ddea72bae61b1243de8f3</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="23"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="telnet" method="table" conf="3"/></port>
<port protocol="tcp" portid="25"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="smtp" method="table" conf="3"/><script id="smtp-commands" output="Couldn't establish connection on port 25"/><script id="ssl-cert" output="Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
Not valid before: 2010-03-17T13:07:45+00:00
Not valid after: 2010-04-16T13:07:45+00:00"><table key="subject">
<elem key="localityName">Everywhere</elem>
<elem key="stateOrProvinceName">There is no such thing outside US</elem>
<elem key="organizationalUnitName">Office for Complication of Otherwise Simple Affairs</elem>
<elem key="organizationName">OCOSA</elem>
<elem key="commonName">ubuntu804-base.localdomain</elem>
<elem key="countryName">XX</elem>
<elem key="emailAddress">[email protected]</elem>
</table>
<table key="issuer">
<elem key="localityName">Everywhere</elem>
<elem key="stateOrProvinceName">There is no such thing outside US</elem>
<elem key="organizationalUnitName">Office for Complication of Otherwise Simple Affairs</elem>
<elem key="organizationName">OCOSA</elem>
<elem key="commonName">ubuntu804-base.localdomain</elem>
<elem key="countryName">XX</elem>
<elem key="emailAddress">[email protected]</elem>
</table>
<table key="pubkey">
<elem key="type">rsa</elem>
<elem key="bits">1024</elem>
</table>
<table key="validity">
<elem key="notBefore">2010-03-17T13:07:45+00:00</elem>
<elem key="notAfter">2010-04-16T13:07:45+00:00</elem>
</table>
<elem key="md5">dcd9ad906c8f2f7374af383b25408828</elem>
<elem key="sha1">ed093088706603bfd5dc237399b498da2d4d31c6</elem>
<elem key="pem">-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</elem>
</script><script id="ssl-date" output="2013-06-23T18:18:14+00:00; -20h04m59s from local time."><elem key="date">2013-06-23T18:18:14+00:00</elem>
<elem key="delta">-72299</elem>
</script></port>
<port protocol="tcp" portid="53"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="domain" method="table" conf="3"/><script id="dns-nsid" output="
 bind.version: 9.4.2
"/></port>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2 111/tcp rpcbind
 100000 2 111/udp rpcbind
 100003 2,3,4 2049/tcp nfs
 100003 2,3,4 2049/udp nfs
 100005 1,2,3 51169/tcp mountd
 100005 1,2,3 60874/udp mountd
 100021 1,3,4 50156/udp nlockmgr
 100021 1,3,4 60607/tcp nlockmgr
 100024 1 54092/tcp status
 100024 1 56116/udp status
"/></port>
<port protocol="tcp" portid="139"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="netbios-ssn" method="table" conf="3"/></port>
<port protocol="tcp" portid="445"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="microsoft-ds" method="table" conf="3"/></port>
<port protocol="tcp" portid="512"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="exec" method="table" conf="3"/></port>
<port protocol="tcp" portid="513"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="login" method="table" conf="3"/></port>
<port protocol="tcp" portid="514"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="shell" method="table" conf="3"/></port>
<port protocol="tcp" portid="1099"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="java-rmi" product="Java RMI Registry" method="probed" conf="10"/></port>
<port protocol="tcp" portid="1524"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ingreslock" method="table" conf="3"/></port>
<port protocol="tcp" portid="2049"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="nfs" method="table" conf="3"/></port>
<port protocol="tcp" portid="2121"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ccproxy-ftp" method="table" conf="3"/></port>
<port protocol="tcp" portid="3306"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="mysql" method="table" conf="3"/></port>
<port protocol="tcp" portid="5432"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="postgresql" method="table" conf="3"/></port>
<port protocol="tcp" portid="5900"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="vnc" method="table" conf="3"/><script id="vnc-info" output="
 Protocol version: 3.3
 Security types:
 Unknown security type (33554432)
"/></port>
<port protocol="tcp" portid="6000"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="X11" method="table" conf="3"/></port>
<port protocol="tcp" portid="6667"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="irc" method="table" conf="3"/><script id="irc-info" output="Server: irc.Metasploitable.LAN
Version: Unreal3.2.8.1. irc.Metasploitable.LAN 
Lservers/Lusers: 0/1
Uptime: 2 days, 5:49:10
Source host: 38B848B3.9E6D1434.168799A3.IP
Source ident: OK nmap
"/></port>
<port protocol="tcp" portid="8008"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="8009"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ajp13" method="table" conf="3"/><script id="ajp-methods" output="Failed to get a valid response for the OPTION request"/></port>
<port protocol="tcp" portid="8080"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http-proxy" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-open-proxy" output="Proxy might be redirecting requests"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="8180"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="unknown" method="table" conf="3"/><script id="http-favicon" output="Apache Tomcat"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Apache Tomcat/5.5"><elem key="title">Apache Tomcat/5.5</elem>
<elem key="redirect_url">nil</elem>
</script></port>
</ports>
<os><portused state="open" proto="tcp" portid="21"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="31340"/>
<osmatch name="Linux 2.6.9 - 2.6.33" accuracy="100" line="42547">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
</os>
<uptime seconds="193588" lastboot="Sat Jun 22 09:38:17 2013"/>
<distance value="2"/>
<tcpsequence index="202" difficulty="Good luck!" values="36F210B3,363DE19A,36CC3991,369CC93C,373BF79E,3769E2DF"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="100HZ" values="1273B9F,1273BA9,1273BB3,1273BBD,1273BC7,1273BD1"/>
<hostscript><script id="nbstat" output="NetBIOS name: METASPLOITABLE, NetBIOS user: <unknown>, NetBIOS MAC: <unknown>"/><script id="smb-os-discovery" output="
 OS: Unix (Samba 3.0.28a)
 Computer name: metasploitable
 NetBIOS computer name: 
 Domain name: localdomain
 FQDN: metasploitable.localdomain
 System time: 2013-06-23T14:18:04-04:00
"><elem key="os">Unix</elem>
<elem key="lanmanager">Samba 3.0.28a</elem>
<elem key="domain">nil</elem>
<elem key="server"></elem>
<elem key="date">2013-06-23T14:18:04-04:00</elem>
<elem key="fqdn">metasploitable.localdomain</elem>
<elem key="domain_dns">localdomain</elem>
<elem key="forest_dns">nil</elem>
<elem key="workgroup">WORKGROUP</elem>
<elem key="cpe">nil</elem>
</script><script id="smb-security-mode" output="
 Account that was used for smb scripts: guest
 User-level authentication
 SMB Security: Challenge/response passwords supported
 Message signing disabled (dangerous, but default)
"/><script id="smbv2-enabled" output="Server doesn't support SMBv2 protocol"/></hostscript><times srtt="911" rttvar="339" to="100000"/>
</host>
<host starttime="1372083737" endtime="1372083927"><status state="up" reason="arp-response" reason_ttl="0"/>
<address addr="172.16.69.158" addrtype="ipv4"/>
<address addr="00:0C:29:53:26:1F" addrtype="mac" vendor="VMware"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="975">
<extrareasons reason="resets" count="975"/>
</extraports>
<port protocol="tcp" portid="21"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ftp" method="table" conf="3"/><script id="ftp-anon" output="Anonymous FTP login allowed (FTP code 230)"/></port>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA)
2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">600fcfe1c05f6a74d69024fac4d56ccd</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAstqnuFMBOZvO3WTEjP4TUdjgWkIVNdTq6kboEDjteOfc65TlI7sRvQBwqAhQjeeyyIk8T55gMDkOD0akSlSXvLDcmcdYfxeIF0ZSuT+nkRhij7XSSA/Oc5QSk3sJ/SInfb78e3anbRHpmkJcVgETJ5WhKObUNf1AKZW++4Xlc63M4KI5cjvMMIPEVOyR3AKmI78Fo3HJjYucg87JjLeC66I7+dlEYX6zT8i1XYwa/L1vZ3qSJISGVu8kRPikMv/cNSvki4j+qDYyZ2E5497W87+Ed46/8P42LNGoOV8OcX/ro6pAcbEPUdUEfkJrqi2YXbhvwIJ0gFMb6wfe5cnQew==</elem>
<elem key="fingerprint">5656240f211ddea72bae61b1243de8f3</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="23"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="telnet" method="table" conf="3"/></port>
<port protocol="tcp" portid="25"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="smtp" method="table" conf="3"/><script id="smtp-commands" output="metasploitable.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, "/><script id="ssl-cert" output="Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX
Not valid before: 2010-03-17T13:07:45+00:00
Not valid after: 2010-04-16T13:07:45+00:00"><table key="subject">
<elem key="localityName">Everywhere</elem>
<elem key="stateOrProvinceName">There is no such thing outside US</elem>
<elem key="organizationalUnitName">Office for Complication of Otherwise Simple Affairs</elem>
<elem key="organizationName">OCOSA</elem>
<elem key="commonName">ubuntu804-base.localdomain</elem>
<elem key="countryName">XX</elem>
<elem key="emailAddress">[email protected]</elem>
</table>
<table key="issuer">
<elem key="localityName">Everywhere</elem>
<elem key="stateOrProvinceName">There is no such thing outside US</elem>
<elem key="organizationalUnitName">Office for Complication of Otherwise Simple Affairs</elem>
<elem key="organizationName">OCOSA</elem>
<elem key="commonName">ubuntu804-base.localdomain</elem>
<elem key="countryName">XX</elem>
<elem key="emailAddress">[email protected]</elem>
</table>
<table key="pubkey">
<elem key="type">rsa</elem>
<elem key="bits">1024</elem>
</table>
<table key="validity">
<elem key="notBefore">2010-03-17T13:07:45+00:00</elem>
<elem key="notAfter">2010-04-16T13:07:45+00:00</elem>
</table>
<elem key="md5">dcd9ad906c8f2f7374af383b25408828</elem>
<elem key="sha1">ed093088706603bfd5dc237399b498da2d4d31c6</elem>
<elem key="pem">-----BEGIN CERTIFICATE-----
MIIDWzCCAsQCCQD6+TpMf7a5zDANBgkqhkiG9w0BAQUFADCB8TELMAkGA1UEBhMC
WFgxKjAoBgNVBAgTIVRoZXJlIGlzIG5vIHN1Y2ggdGhpbmcgb3V0c2lkZSBVUzET
MBEGA1UEBxMKRXZlcnl3aGVyZTEOMAwGA1UEChMFT0NPU0ExPDA6BgNVBAsTM09m
ZmljZSBmb3IgQ29tcGxpY2F0aW9uIG9mIE90aGVyd2lzZSBTaW1wbGUgQWZmYWly
czEjMCEGA1UEAxMadWJ1bnR1ODA0LWJhc2UubG9jYWxkb21haW4xLjAsBgkqhkiG
9w0BCQEWH3Jvb3RAdWJ1bnR1ODA0LWJhc2UubG9jYWxkb21haW4wHhcNMTAwMzE3
MTQwNzQ1WhcNMTAwNDE2MTQwNzQ1WjCB8TELMAkGA1UEBhMCWFgxKjAoBgNVBAgT
IVRoZXJlIGlzIG5vIHN1Y2ggdGhpbmcgb3V0c2lkZSBVUzETMBEGA1UEBxMKRXZl
cnl3aGVyZTEOMAwGA1UEChMFT0NPU0ExPDA6BgNVBAsTM09mZmljZSBmb3IgQ29t
cGxpY2F0aW9uIG9mIE90aGVyd2lzZSBTaW1wbGUgQWZmYWlyczEjMCEGA1UEAxMa
dWJ1bnR1ODA0LWJhc2UubG9jYWxkb21haW4xLjAsBgkqhkiG9w0BCQEWH3Jvb3RA
dWJ1bnR1ODA0LWJhc2UubG9jYWxkb21haW4wgZ8wDQYJKoZIhvcNAQEBBQADgY0A
MIGJAoGBANa0EzYzmpVxexvefIN12nGxPKl//q1kG3fpT66+ytT4y++uu0N5JHP/
POWeO238yLGs+kxNXptMmVQL16hKULqp3h0f9ORrAqP0a0XNTK+NiWIzj2W7NmGf
xCxzwU4uoKgUTphwRmG70bkx34yZ7nVreTxAoK6XAJCd3JkNM6S1AgMBAAEwDQYJ
KoZIhvcNAQEFBQADgYEAkqS0uBRVYyVRSgvDKiLPOvgXagzPZqqnZS9Ibc3jPlyf
d2zURFQfHoRPjtSN3awtiAkhqNpWLKkFPEloNRl1DNpTI4iIGS10JsEiZe4RaINq
U0qcJ8ugtOmNKQyyPBhcZ8xTph4w0Komex6uQLkpAWwuvKIZlHwVbo0wOPbKLnU=
-----END CERTIFICATE-----
</elem>
</script><script id="ssl-date" output="2013-06-23T18:20:15+00:00; -20h05m00s from local time."><elem key="date">2013-06-23T18:20:15+00:00</elem>
<elem key="delta">-72300</elem>
</script></port>
<port protocol="tcp" portid="53"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="domain" method="table" conf="3"/><script id="dns-nsid" output="
 bind.version: 9.4.2
"/></port>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2 111/tcp rpcbind
 100000 2 111/udp rpcbind
 100003 2,3,4 2049/tcp nfs
 100003 2,3,4 2049/udp nfs
 100005 1,2,3 51169/tcp mountd
 100005 1,2,3 60874/udp mountd
 100021 1,3,4 50156/udp nlockmgr
 100021 1,3,4 60607/tcp nlockmgr
 100024 1 54092/tcp status
 100024 1 56116/udp status
"/></port>
<port protocol="tcp" portid="139"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="netbios-ssn" method="table" conf="3"/></port>
<port protocol="tcp" portid="445"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="microsoft-ds" method="table" conf="3"/></port>
<port protocol="tcp" portid="512"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="exec" method="table" conf="3"/></port>
<port protocol="tcp" portid="513"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="login" method="table" conf="3"/></port>
<port protocol="tcp" portid="514"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="shell" method="table" conf="3"/></port>
<port protocol="tcp" portid="1099"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="java-rmi" product="Java RMI Registry" method="probed" conf="10"/></port>
<port protocol="tcp" portid="1524"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ingreslock" method="table" conf="3"/></port>
<port protocol="tcp" portid="2049"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="nfs" method="table" conf="3"/></port>
<port protocol="tcp" portid="2121"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ccproxy-ftp" method="table" conf="3"/></port>
<port protocol="tcp" portid="3306"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="mysql" method="table" conf="3"/></port>
<port protocol="tcp" portid="5432"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="postgresql" method="table" conf="3"/></port>
<port protocol="tcp" portid="5900"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="vnc" method="table" conf="3"/><script id="vnc-info" output="
 Protocol version: 3.3
 Security types:
 Unknown security type (33554432)
"/></port>
<port protocol="tcp" portid="6000"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="X11" method="table" conf="3"/></port>
<port protocol="tcp" portid="6667"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="irc" method="table" conf="3"/><script id="irc-info" output="Server: irc.Metasploitable.LAN
Version: Unreal3.2.8.1. irc.Metasploitable.LAN 
Lservers/Lusers: 0/1
Uptime: 2 days, 5:51:12
Source host: 38B848B3.9E6D1434.168799A3.IP
Source ident: OK nmap
"/></port>
<port protocol="tcp" portid="8008"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="8009"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ajp13" method="table" conf="3"/><script id="ajp-methods" output="Failed to get a valid response for the OPTION request"/></port>
<port protocol="tcp" portid="8080"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="http-proxy" method="table" conf="3"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-open-proxy" output="Proxy might be redirecting requests"/><script id="http-title" output="Metasploitable2 - Linux"><elem key="title">Metasploitable2 - Linux</elem>
<elem key="redirect_url">nil</elem>
</script></port>
<port protocol="tcp" portid="8180"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="unknown" method="table" conf="3"/><script id="http-favicon" output="Apache Tomcat"/><script id="http-methods" output="No Allow or Public header in OPTIONS response (status code 200)"/><script id="http-title" output="Apache Tomcat/5.5"><elem key="title">Apache Tomcat/5.5</elem>
<elem key="redirect_url">nil</elem>
</script></port>
</ports>
<os><portused state="open" proto="tcp" portid="21"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="34941"/>
<osmatch name="Linux 2.6.9 - 2.6.33" accuracy="100" line="42547">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
</os>
<uptime seconds="193630" lastboot="Sat Jun 22 09:38:17 2013"/>
<distance value="1"/>
<tcpsequence index="207" difficulty="Good luck!" values="AA550476,A9DB79AB,A9EBC0A8,AAD3A559,AA52CD77,AA53E47B"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="100HZ" values="1276BA7,1276BB1,1276BBB,1276BC5,1276BCF,1276BD9"/>
<hostscript><script id="nbstat" output="NetBIOS name: METASPLOITABLE, NetBIOS user: <unknown>, NetBIOS MAC: <unknown>"/><script id="smb-os-discovery" output="
 OS: Unix (Samba 3.0.28a)
 Computer name: metasploitable
 NetBIOS computer name: 
 Domain name: localdomain
 FQDN: metasploitable.localdomain
 System time: 2013-06-23T14:20:05-04:00
"><elem key="os">Unix</elem>
<elem key="lanmanager">Samba 3.0.28a</elem>
<elem key="domain">nil</elem>
<elem key="server"></elem>
<elem key="date">2013-06-23T14:20:05-04:00</elem>
<elem key="fqdn">metasploitable.localdomain</elem>
<elem key="domain_dns">localdomain</elem>
<elem key="forest_dns">nil</elem>
<elem key="workgroup">WORKGROUP</elem>
<elem key="cpe">nil</elem>
</script><script id="smb-security-mode" output="
 Account that was used for smb scripts: guest
 User-level authentication
 SMB Security: Challenge/response passwords supported
 Message signing disabled (dangerous, but default)
"/><script id="smbv2-enabled" output="Server doesn't support SMBv2 protocol"/></hostscript><times srtt="202" rttvar="380" to="100000"/>
</host>
<host starttime="1372083885" endtime="1372083945"><status state="up" reason="echo-reply" reason_ttl="64"/>
<address addr="172.16.116.128" addrtype="ipv4"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="998">
<extrareasons reason="resets" count="998"/>
</extraports>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 49:3f:dc:19:6d:bc:af:72:3d:6e:79:98:ce:0f:2d:9e (DSA)
2048 e4:90:0d:42:98:99:7a:c8:bd:7c:61:cb:fb:03:3c:f5 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">493fdc196dbcaf723d6e7998ce0f2d9e</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAwuhSGyHgXDFt1qAORqui2j0OWcy4EmMruOFSYZT4yMQIcXZejsqYj/TATi/ljQJYZnVIxupzisLhdyhmAAz6nNyD2eRTYJjUOVyhkLO504ObwdAiWatqXoNf0A9XdY9jZLaywtEwrqYmZMSasMYqk97ZjAH+do9bCdAxfb4kWZFGV3E7N5P1QFBAL4/osE6Lx//TtttnYlv509hpMqfzNfI2pdKLnSokbnZbSQvMDYSSh+60mGJvEaQ2xsutL5gA+Xlg5oD2DlvNNeUTJliG36ht3ncJsLwBXty7L+gXY0261KYwLxvhHNhe69dlbWlEZHgzSkV2OD7LEI5yIu+BIw==</elem>
<elem key="fingerprint">e4900d4298997ac8bd7c61cbfb033cf5</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2 111/tcp rpcbind
 100000 2 111/udp rpcbind
 100024 1 615/udp status
 100024 1 618/tcp status
"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="22"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="36263"/>
<osmatch name="Linux 2.6.18 - 2.6.32" accuracy="100" line="36578">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
</os>
<uptime seconds="241905" lastboot="Fri Jun 21 20:14:00 2013"/>
<distance value="1"/>
<tcpsequence index="259" difficulty="Good luck!" values="8351AF36,E5EA83BC,F63C9865,CA9B2D5C,78DEC52A,46E5E7E7"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="E6B2622,E6B2686,E6B26EA,E6B274E,E6B27B3,E6B2816"/>
<times srtt="373" rttvar="614" to="100000"/>
</host>
<host starttime="1372083927" endtime="1372083947"><status state="up" reason="arp-response" reason_ttl="0"/>
<address addr="172.16.69.128" addrtype="ipv4"/>
<address addr="00:0C:29:2A:A7:71" addrtype="mac" vendor="VMware"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="998">
<extrareasons reason="resets" count="998"/>
</extraports>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 49:3f:dc:19:6d:bc:af:72:3d:6e:79:98:ce:0f:2d:9e (DSA)
2048 e4:90:0d:42:98:99:7a:c8:bd:7c:61:cb:fb:03:3c:f5 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">493fdc196dbcaf723d6e7998ce0f2d9e</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAwuhSGyHgXDFt1qAORqui2j0OWcy4EmMruOFSYZT4yMQIcXZejsqYj/TATi/ljQJYZnVIxupzisLhdyhmAAz6nNyD2eRTYJjUOVyhkLO504ObwdAiWatqXoNf0A9XdY9jZLaywtEwrqYmZMSasMYqk97ZjAH+do9bCdAxfb4kWZFGV3E7N5P1QFBAL4/osE6Lx//TtttnYlv509hpMqfzNfI2pdKLnSokbnZbSQvMDYSSh+60mGJvEaQ2xsutL5gA+Xlg5oD2DlvNNeUTJliG36ht3ncJsLwBXty7L+gXY0261KYwLxvhHNhe69dlbWlEZHgzSkV2OD7LEI5yIu+BIw==</elem>
<elem key="fingerprint">e4900d4298997ac8bd7c61cbfb033cf5</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2 111/tcp rpcbind
 100000 2 111/udp rpcbind
 100024 1 615/udp status
 100024 1 618/tcp status
"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="22"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="41374"/>
<osmatch name="Linux 2.6.18 - 2.6.32" accuracy="100" line="36578">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
</os>
<uptime seconds="241907" lastboot="Fri Jun 21 20:14:00 2013"/>
<distance value="1"/>
<tcpsequence index="262" difficulty="Good luck!" values="79AE61B5,9886AF1D,FD14904,25567A51,55A9ABBE,6578E9B4"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="E6B2DC3,E6B2E28,E6B2E8D,E6B2EF1,E6B2F55,E6B2FBC"/>
<times srtt="636" rttvar="947" to="100000"/>
</host>
<host starttime="1372083927" endtime="1372083947"><status state="up" reason="arp-response" reason_ttl="0"/>
<address addr="172.16.69.157" addrtype="ipv4"/>
<address addr="00:0C:29:1F:1E:2B" addrtype="mac" vendor="VMware"/>
<hostnames>
</hostnames>
<ports><extraports state="closed" count="998">
<extrareasons reason="resets" count="998"/>
</extraports>
<port protocol="tcp" portid="22"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="ssh" method="table" conf="3"/><script id="ssh-hostkey" output="1024 e5:0a:7c:e0:fc:23:d3:4a:64:91:2a:c5:71:78:31:3a (DSA)
2048 d4:bc:15:c5:4b:8c:58:0c:ea:2f:b8:79:9c:13:a8:58 (RSA)"><table>
<elem key="type">ssh-dss</elem>
<elem key="key">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</elem>
<elem key="fingerprint">e50a7ce0fc23d34a64912ac57178313a</elem>
<elem key="bits">1024</elem>
</table>
<table>
<elem key="type">ssh-rsa</elem>
<elem key="key">AAAAB3NzaC1yc2EAAAABIwAAAQEAyO277IelFMJQTooxbGWhLBKP1u5ZadJLUT55Xyv2gbkDfy8vKC4nGA/32OlgtOYN4jJWSBvS3vZdPMSiFIyDwNsRJ9o8yd22QESTAt8UR2b0bVyOoMYynWM1JS59P7FuB72uWq6sbGTxLuoxtRKsyZfo1ENiiLHLBiR5ZdmWck2mqD0bRhbOxOVtUOXGcDpRlEYSDpgaLEQZi9gM44LCfXi2I0RojS/eLxnezZb9/7R5B0Y5cHpLdkCMp5RMCHcO/EqXA5KWKixAWiBAgQn25sthSxT86w4M5H+sY26JxkrE49EGmyx1hiuZlmFRNOM6wU70TX44SsIjDUidhHJusw==</elem>
<elem key="fingerprint">d4bc15c54b8c580cea2fb8799c13a858</elem>
<elem key="bits">2048</elem>
</table>
</script></port>
<port protocol="tcp" portid="111"><state state="open" reason="syn-ack" reason_ttl="64"/><service name="rpcbind" method="table" conf="3"/><script id="rpcinfo" output="
 program version port/proto service
 100000 2,3,4 111/tcp rpcbind
 100000 2,3,4 111/udp rpcbind
 100024 1 33023/tcp status
 100024 1 43432/udp status
"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="22"/>
<portused state="closed" proto="tcp" portid="1"/>
<portused state="closed" proto="udp" portid="44305"/>
<osmatch name="Linux 2.6.32 - 3.6" accuracy="100" line="71270">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="100"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
</osmatch>
</os>
<uptime seconds="82" lastboot="Mon Jun 24 15:24:25 2013"/>
<distance value="1"/>
<tcpsequence index="257" difficulty="Good luck!" values="C24792B9,E61CEA9D,254DCE3F,43376741,930E3A90,9CC934A8"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="13B03,13B68,13BCD,13C31,13C95,13CFA"/>
<times srtt="421" rttvar="738" to="100000"/>
</host>
<postscript><script id="ssh-hostkey" output="Possible duplicate hosts
Key 2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA) used by:
 172.16.69.158
 172.16.116.156
Key 2048 e4:90:0d:42:98:99:7a:c8:bd:7c:61:cb:fb:03:3c:f5 (RSA) used by:
 172.16.69.128
 172.16.116.128
Key 1024 49:3f:dc:19:6d:bc:af:72:3d:6e:79:98:ce:0f:2d:9e (DSA) used by:
 172.16.69.128
 172.16.116.128
Key 1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA) used by:
 172.16.69.158
 172.16.116.156"><table>
<table key="hosts">
<elem>172.16.69.158</elem>
<elem>172.16.116.156</elem>
</table>
<table key="key">
<elem key="type">ssh-rsa</elem>
<elem key="fingerprint">56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3</elem>
<elem key="bits">2048</elem>
</table>
</table>
<table>
<table key="hosts">
<elem>172.16.69.128</elem>
<elem>172.16.116.128</elem>
</table>
<table key="key">
<elem key="type">ssh-rsa</elem>
<elem key="fingerprint">e4:90:0d:42:98:99:7a:c8:bd:7c:61:cb:fb:03:3c:f5</elem>
<elem key="bits">2048</elem>
</table>
</table>
<table>
<table key="hosts">
<elem>172.16.69.128</elem>
<elem>172.16.116.128</elem>
</table>
<table key="key">
<elem key="type">ssh-dss</elem>
<elem key="fingerprint">49:3f:dc:19:6d:bc:af:72:3d:6e:79:98:ce:0f:2d:9e</elem>
<elem key="bits">1024</elem>
</table>
</table>
<table>
<table key="hosts">
<elem>172.16.69.158</elem>
<elem>172.16.116.156</elem>
</table>
<table key="key">
<elem key="type">ssh-dss</elem>
<elem key="fingerprint">60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd</elem>
<elem key="bits">1024</elem>
</table>
</table>
</script></postscript><runstats><finished time="1372083947" timestr="Mon Jun 24 15:25:47 2013" elapsed="229.45" summary="Nmap done at Mon Jun 24 15:25:47 2013; 9 IP addresses (8 hosts up) scanned in 229.45 seconds" exit="success"/><hosts up="8" down="1" total="9"/>
</runstats>
</nmaprun>