在文本文件中查找模式的所有出现

Question

我有一个看起来像这样的文本文件

Nmap scan report for 192.168.2.1
Host is up (0.023s latency).
PORT     STATE  SERVICE
5001/tcp closed commplex-link
MAC Address: EC:1A:59:A2:84:80 (Belkin International)

Nmap scan report for 192.168.2.2
Host is up (0.053s latency).
PORT     STATE  SERVICE
5001/tcp closed commplex-link
MAC Address: 94:35:0A:F0:47:C2 (Samsung Electronics Co.)

Nmap scan report for 192.168.2.3  
Host is up (0.18s latency).  
PORT     STATE    SERVICE  
5001/tcp filtered commplex-link  
MAC Address: 00:13:CE:C0:E5:F3 (Intel Corporate)  

Nmap scan report for 192.168.2.6
Host is up (0.062s latency).
PORT     STATE  SERVICE
5001/tcp closed commplex-link
MAC Address: 90:21:55:7D:53:4F (HTC)

我想找到端口5001关闭(未过滤)的所有IP.我尝试使用以下逻辑来查找所有此类IP

fp = open('nmap_op.txt').read()
ip = re.compile('([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)(.*)closed',re.S)
matched = ip.findall(fp)
for item in matched:
  print item

我期待输出

192.168.2.1

192.168.2.2

192.168.2.6

但我没有得到理想的输出.输出只是一个项目,如下所示:

('192.168.2.1','\n主机已启动(延迟0.023秒).\nPORT STATE SERVICE \n5001/tcp closed commplex-link \nMAC地址:EC:1A:59:A2:84:80(Belkin International)\n \nN地图扫描报告为192.168.2.2 \n主机已启动(延迟时间为0.053秒).\nPORT STATE SERVICE \n5001/tcp已关闭commplex-link \nMAC地址:94:35:0A:F0:47:C2(Samsung Electronics Co) .)\n \nN地图扫描报告为192.168.2.3 \n主机已启动(延迟0.18秒).\nPORT STATE SERVICE \n5001/tcp filtered commplex-link \nMAC地址:00:13:CE:C0:E5:F3(英特尔公司)\n \nN地图扫描报告为192.168.2.6 \n主机已启动(延迟时间为0.062秒).\nPORT STATE SERVICE \n5001/tcp)

我哪里错了？

解决方案:以下逻辑对我有用.如果有人有更好的答案,请告诉我.

fp = open('nmap_op.txt').read()
entries = re.split('\n\n',fp)  
ip = re.compile('([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+).*?closed',re.S)
matched = []
for item in entries:
  if ip.search(item):
    matched.append(ip.search(item).group(1))

Answer 1

你不需要re.S这里.该s修改改变了点元字符的含义(.)从" 符合一切除了换行符为"" 相匹配的一切,包括换行符 ".你不需要这个.

第二个捕获组也不是必需的.你可以删除它只返回IP:

>>> matched = re.findall('([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+).*closed', fp)
>>> matched
['192.168.2.1', '192.168.2.2', '192.168.2.6']