What does the -oX flag do in an Nmap scan?