Nmap Development mailing list archives

Updating the time probes


From: Lionel Cons <lionel.cons () cern ch>
Date: Mon, 10 Dec 2007 11:38:25 +0100

The latest nmap-service-probes file contains:

 # This will match systems with clocks set between the
 # following 2 dates:
 # 0xC4000000 = Mon, 15 Mar 2004 10:12:16 GMT
 # 0xCCFFFFFF = Sat, 27 Dec 2008 01:14:39 GMT
 # Also needs updating in the UDP Help probe (search for TIME)
 # TIME
 match time m|^[\xc4-\xcc]...$| i/32 bits/
 match time m|^[\xc4-\xcc]....\0\0\0$| i/64 bits/

As some people sometimes use old versions of Nmap, I would suggest to
update these magic values now and use instead:

 # This will match systems with clocks set between the
 # following 2 dates:
 # 0xCA000000 = Thu May 24 14:13:52 2007 GMT
 # 0xCEFFFFFF = Tue Jan 19 10:55:11 2010 GMT
 # Also needs updating in the UDP Help probe (search for TIME)
 # TIME
 match time m|^[\xca-\xce]...$|s i/32 bits/
 match time m|^[\xca-\xce]....\0\0\0$|s i/64 bits/

(note the "s" option for the match, as per my previous email)

Cheers,

Lionel Cons

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: