help using awk - Shell Programming and Scripting

phamp008 · #1 01-17-2008

Hi I have an output of the nmap command scan for port 22 as below

Interesting ports on 172.29.143.221:
PORT STATE SERVICE
22/tcp open ssh

Interesting ports on 172.29.143.240:
PORT STATE SERVICE
22/tcp closed ssh

Interesting ports on 172.29.143.243:
PORT STATE SERVICE
22/tcp open ssh

I would like to print out the ip address with STATE "open" only.

Thank.

ennstate · #2 01-17-2008

Please try this,

Code:

sed -nf /tmp/OpenIp.sed /tmp/YourInputFile

cat /tmp/OpenIp.sed

Code:

/Interesting/{
N
N
/open/{
P
}
}

Thanks
Nagarajan G

Tytalus · #3 01-17-2008

Code:

awk '/Interesting/{r[NR+2]=$4}/open/{print r[NR]}' file | tr -d :

should work.

radoulov · #4 01-17-2008

Or:

Code:

awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" filename

phamp008 · #5 01-17-2008

Thank you to radoulov. It works well just one single command.

Is it possible if i can take this output and insert this into an array?
If so, would you please advise the code ?

radoulov · #6 01-18-2008

Yes,
but the implementation depends on the shell you're using.
Some examples:

[bash]

Code:

bash 3.2.25(1)$ cat file
Interesting ports on 172.29.143.221:
PORT STATE SERVICE
22/tcp open ssh

Interesting ports on 172.29.143.240:
PORT STATE SERVICE
22/tcp closed ssh

Interesting ports on 172.29.143.243:
PORT STATE SERVICE
22/tcp open ssh
bash 3.2.25(1)$ a=($(awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" file))
bash 3.2.25(1)$ echo ${a[0]}
172.29.143.221
bash 3.2.25(1)$ echo ${a[1]}
172.29.143.243

[ksh]

Code:

$ # ksh88 doesn't support this  syntax 
$ a=($(awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" file))
$ print ${a[0]}
172.29.143.221
$ # or
$ set -A a $(awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" file)
$ print ${a[1]}
172.29.143.243

[zsh]

Code:

% a=($(awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" file)) 
% print $a[1]
172.29.143.221
% print $a[2]
172.29.143.243

Or just:

[sh]

Code:

$ set -- `awk '/^Interesting/{ip=$4}/open/{print ip}' FS="[ :]" file`
$ echo $1
172.29.143.221
$ echo $2
172.29.143.243

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode