Nmap Development mailing list archives
Service Detection: IBM DB2 Database Server
From: Tom Sellers <nmap () fadedcode net>
Date: Thu, 12 Jun 2008 21:16:54 -0500
I have attached a file containing probes and match lines that detect IBM DB2 Database server. This should allow for the detection of DB2 ranging from 5.x.x to 9.x.x. Two of the match lines will return the version of DB2 with the 3rd only detecting the service. The primary DB2 port is TCP 523, with other services listening on 50000 and sometimes 50001. The proper query to 523 will reveal the DB platform, database names, file system path for the database, and network ports (50001,etc) I intend to write a NSE script that will acquire this information and display it. There are also more detailed version and build details that are encoded in EBCDIC that the script could pull out as well. Also, thanks to Brandon Enright for providing several PCRE tips for this and prior submissions. Tom
Attachment:
db2_probe.txt
Description:
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://SecLists.Org
Current thread:
- Service Detection: IBM DB2 Database Server Tom Sellers (Jun 12)
- Re: Service Detection: IBM DB2 Database Server Matt Selsky (Jun 13)
- Re: Service Detection: IBM DB2 Database Server Tom Sellers (Jun 13)
- Re: Service Detection: IBM DB2 Database Server Matt Selsky (Jun 13)