有关如何以编程方式与nmap集成的任何想法？-Anyideasonhowtointegratewithnmapprogrammatically?

(note: I am not a lawyer, and none of this should be taken as legal advice)

(注意:我不是律师,这一切都不应被视为法律建议)

You should probably note that Nmap considers a product that parses its output to be a derived work, according to the licensing chapter in the manual, and thus fall under the GPL licensing obligations. The GPLv2 does not define what a derived work is, instead letting that be up to the courts and according to definitions in copyright law. The usual interpretation is that any form of linking, other than linking to system libraries included in the operating system, makes the linked work a derived work, while separate process that talk over pipes or the network are not necessarily derived works, though as mentioned in the GPL FAQ, "if the semantics of the communication are intimate enough, exchanging complex internal data structures, that too could be a basis to consider the two parts as combined into a larger program." That seems to be the interpretation that the Nmap developers are taking.

您可能应该注意到,根据手册中的许可章节,Nmap会将解析其输出的产品视为派生作品,因此属于GPL许可义务。 GPLv2没有定义派生作品是什么,而是根据版权法的定义让法院判决。通常的解释是,除了链接到操作系统中包含的系统库之外,任何形式的链接都使链接的工作成为派生的工作,而通过管道或网络进行交谈的单独进程不一定是派生的工作,尽管如上所述GPL常见问题解答,“如果通信的语义足够密切,交换复杂的内部数据结构,这也可以成为将这两个部分组合成一个更大的程序的基础。”这似乎是Nmap开发人员正在采取的解释。

Anyhow, assuming that you don't need to worry about the GPL, you probably want to look at the output options for Nmap; in particular, -oX for XML output and -oG for "greppable" output. If you need more control over what Nmap does, you should look into the Nmap Scripting Engine, a Lua scripting engine in Nmap that gives you all kinds of control.

无论如何,假设您不需要担心GPL,您可能想要查看Nmap的输出选项;特别是,-oX表示XML输出,-oG表示“greppable”输出。如果您需要更多地控制Nmap的功能,您应该查看Nmap脚本引擎,它是Nmap中的Lua脚本引擎,可以为您提供各种控制。

Are you looking to use specific pieces of functionality? An easy way I've found of using nmap in other languages is to have it spit out xml using the -oX switch. There is a DTD (and numerous ways to covert this to an xsd for your favourite binding tool) what you can use to consume the data.

您是否希望使用特定的功能?我发现在其他语言中使用nmap的一种简单方法是使用-oX开关吐出xml。有一个DTD(和许多方法将其转换为您最喜欢的绑定工具的xsd)您可以使用什么来使用数据。

Given that you're writing in C++ though it probably would be easy enough to link against directly if you needed.

鉴于您正在使用C ++编写,但如果您需要,可能很容易直接链接。

You could always read it in pipe. According to tradition that is acceptable even if non-GPL accesses GPL.

你总是可以用烟斗来读它。根据传统,即使非GPL访问GPL也是可以接受的。

"Integrate" doesn't really say enough. What kind of things do you want to do? Depending on the level of "integration" it might be enough to run nmap as a separate process and capture its output. The advantage there is that you can update the version of nmap without rebuilding your app. If you require tighter coupling, then it depends on what functionality you need and "library-izing" nmap, but be warned that it's GPL code and this kind of integration would require source distribution of your app..

“整合”并没有真正说出来。你想做什么事?根据“集成”的级别,将nmap作为单独的进程运行并捕获其输出可能就足够了。优点是您可以在不重建应用程序的情况下更新nmap的版本。如果你需要更紧密的耦合,那么它取决于你需要什么功能和“库化”nmap,但要注意它是GPL代码,这种集成需要你的应用程序的源代码分发。