Nmap Development mailing list archives

nmap-service-probes - NTP support

From: Martin Mačok <martin.macok () underground cz>
Date: Mon, 6 Dec 2004 18:25:51 +0100

###########
Probe UDP NTPRequest 
q|\xe3\x00\x04\xfa\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc5\x4f\x23\x4b\x71\xb1\x52\xf3|
ports 123

match ntp m|^\$[\x01-\x0f]..............................................$|s  v/NTP/v4//
match ntp m|^\xe4\0..............................................$|s  v/NTP/v4/unsynchronized/
###########


I'm not sure if we can differentiate implementations -- if softmatch
wouldn't be better in this case.


Martin Mačok
IT Security Consultant

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org

Current thread:

nmap-service-probes - NTP support Martin Mačok (Dec 06)
- Re: nmap-service-probes - NTP support Fyodor (Dec 06)
  - Portscanning through HTTP proxy? Mark Lachniet (Dec 06)
    - Re: Portscanning through HTTP proxy? MadHat (Dec 06)
    - Message not available
    - Re: Portscanning through HTTP proxy? MadHat (Dec 07)
    - Re: Portscanning through HTTP proxy? uzy (Dec 07)
    - RE: Portscanning through HTTP proxy? Alex R (Dec 07)
    - Re: Portscanning through HTTP proxy? MadHat (Dec 07)
    - Re: Portscanning through HTTP proxy? uzy (Dec 08)
    - RE: Portscanning through HTTP proxy? Alex R (Dec 08)
    - Re[2]: Portscanning through HTTP proxy? Bo Cato (Dec 08)

(Thread continues...)