Nmap XML open-port report

How to use this tool

1. Paste XML from an authorized scan, or choose its saved XML file. Clear the selected file before switching back to pasted text.
2. Build the report. Check open-port count, host count and scanStatus; absent or failed completion metadata means the report may be partial.
3. Download open-ports.xlsx, open-ports.csv or the complete JSON. Review the table alongside the original scan before using it as an inventory.

Supported inputs and limits

One UTF-8 file up to 10 MiB, or pasted text up to 1 MiB; at most 20,000 open-port rows. A selected file takes precedence over the pasted text. The root must be nmaprun. Each cell is limited to 32,767 UTF-16 code units; repeated table values together must fit 2 MiB of UTF-8.

Only explicit host/ports/port entries with state="open" and protocol tcp or udp are included. Closed, filtered, open|filtered, extraports and OS port probes are excluded. Missing service fields remain blank.

For hosts with several addresses, the table uses the first IPv4 address, otherwise the first IPv6 address. The JSON download preserves every reported IP address. A report with no open ports exports headers and zero records.

The standard bare <!DOCTYPE nmaprun> is accepted without loading a DTD. External/internal entity declarations are rejected; stylesheet instructions and referenced resources are never loaded.

CSV prefixes formula-like cells with an apostrophe; XLSX stores every cell as text. The on-page JSON previews 100 records and truncates long preview values; downloads contain full values. If the scan has no successful finished marker or contains a timed-out host, a warning remains. This is a saved-report reader, not a scanner or proof of a complete inventory.