Submitted by Brian Caswell <bmc@mitre.org>. ndiff compares two nmap scans and outputs the differences. It allows monitoring of your network(s) for interesting changes in port states and visible hosts.