Re: STOMP Probe

[doug () hcsw org]

Hi Lionel,

Thanks for this probe. I checked it into SVN with one
minor change: I put a rarity value of 8 instead of 7.
I'm not sure that it is worthwhile running this probe
against all ports by default because it is very similar
to the Help probe.

Maybe a good guideline should be that probes don't run
in the default scan unless we expect them to match more
than one application?

Thanks again,

Doug


On Tue, Jan 15, 2008 at 02:46:02PM +0100 or thereabouts, Lionel Cons wrote:
> Here is a new probe to detect STOMP (http://stomp.codehaus.org/):
>
> ##############################NEXT PROBE##############################
> # ActiveMQ's STOMP (Streaming Text Orientated Messaging Protocol)
> Probe TCP HELP4STOMP q|HELP\n\n\0|
> rarity 7
> ports 6163,61613
> match stomp m|^ERROR\nmessage:Unknown STOMP action:.+ org\.apache\.activemq\.|s p/Apache ActiveMQ/

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org