1. <?xml version="1.0" ?>
2. <?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
3. <!-- Nmap 5.21 scan initiated Sun Nov 20 23:44:08 2011 as: /usr/bin/nmap -oX nmap_output.xml -&#45;open -sU -p 161-162 192.168.10.0/24 -->
4. <nmaprun scanner="nmap" args="/usr/bin/nmap -oX nmap_output.xml -&#45;open -sU -p 161-162 192.168.10.0/24" start="1321829048" startstr="Sun Nov 20 23:44:08 2011" version="5.21" xmloutputversion="1.03">
5. <scaninfo type="udp"  protocol="udp" numservices="2" services="161-162" />
6. <verbose level="0" />
7. <debugging level="0" />
8. <host starttime="1321829048" endtime="1321829050"><status state="up" reason="arp-response"/>
9. <address addr="192.168.10.1" addrtype="ipv4" />
10. <address addr="E0:91:F5:FF:FF:FF" addrtype="mac" />
11. <hostnames>
12. <hostname name="VM0" type="PTR"/>
13. </hostnames>
14. <ports><extraports state="closed" count="1">
15. <extrareasons reason="port-unreach" count="1"/>
16. </extraports>
17. <port protocol="udp" portid="161"><state state="open" reason="udp-response" reason_ttl="64"/><service name="snmp" method="table" conf="3" /></port>
18. </ports>
19. <times srtt="651" rttvar="3042" to="100000" />
20. </host>
21. <host starttime="1321829048" endtime="1321829050"><status state="up" reason="arp-response"/>
22. <address addr="192.168.10.3" addrtype="ipv4" />
23. <address addr="52:54:00:FF:FF:FF" addrtype="mac" vendor="QEMU Virtual NIC" />
24. <hostnames>
25. <hostname name="VM1" type="PTR"/>
26. </hostnames>
27. <ports><extraports state="closed" count="2">
28. <extrareasons reason="port-unreaches" count="2"/>
29. </extraports>
30. </ports>
31. <times srtt="1494" rttvar="3043" to="100000" />
32. </host>
33. <host starttime="1321829048" endtime="1321829051"><status state="up" reason="arp-response"/>
34. <address addr="192.168.10.6" addrtype="ipv4" />
35. <address addr="52:54:00:FF:FF:FF" addrtype="mac" vendor="QEMU Virtual NIC" />
36. <hostnames>
37. <hostname name="VM2" type="PTR"/>
38. </hostnames>
39. <ports><port protocol="udp" portid="161"><state state="open|filtered" reason="no-response" reason_ttl="0"/><service name="snmp" method="table" conf="3" /></port>
40. <port protocol="udp" portid="162"><state state="open|filtered" reason="no-response" reason_ttl="0"/><service name="snmptrap" method="table" conf="3" /></port>
41. </ports>
42. <times srtt="964" rttvar="5000" to="100000" />
43. </host>
44. <runstats><finished time="1321829054" timestr="Sun Nov 20 23:44:14 2011" elapsed="6.04"/><hosts up="8" down="248" total="256" />
45. <!-- Nmap done at Sun Nov 20 23:44:14 2011; 256 IP addresses (8 hosts up) scanned in 6.04 seconds -->
46. </runstats></nmaprun>

1. <?php
2. $domDocument = new domDocument();
4. $domDocument->load('nmap_output.xml');
7. $nodesStatus = $domDocument->getElementsByTagName('host');
9. foreach($nodesStatus as $status)
10. {
11. $stas = $status->getElementsByTagName('status');
12. foreach($stas as $sta)
13. {
14.  if ($sta->getAttribute('state') == 'up')
15.  {
16.   $addrs = $status->getElementsByTagName('address');
17.    foreach ($addrs as $addr)
18.    {
19.     if ($addr->getAttribute('addrtype') == 'ipv4')
20.     {
21.     $tabIp[] = $addr->getAttribute('addr');
22.     }
23.    }
24.  }
25. }
26. }
27. foreach($tabIp as $element)
28. {
29.     echo $element . '<br />';
30. }
31. ?>

$domDocument = new DOMDocument();
$domDocument->load('nmap_output.xml');
 
$xpath = new DOMXPath($domDocument);
foreach ($xpath->query("/nmaprun/host[status[@state='up'] and ports/port/state[contains(@state, 'open')]]/address[@addrtype='ipv4']" ) as $element) {
    echo $element->getAttribute('addr')."\n";
}

<?php
    $domDocument = new DOMDocument();
    $domDocument->load('nmap_output.xml');
     
    $xpath = new DOMXPath($domDocument);
    foreach ($xpath->query("/nmaprun/host[status[@state='up'] and ports/port/state[@state='open']]/address[@addrtype='ipv4']" ) as $element) {
       echo $element->getAttribute('addr')."\n";
    echo '<br />';
    }
?>