Re: Matchline for CouchDB

[David Fifield <david () bamsoftware com>]

On Tue, Jan 05, 2010 at 09:11:52AM +0100, Martin Holst Swende wrote:
> I have included a match-line for CouchDB :
>
> Probe TCP GetRequest q|GET / HTTP/1.0\r\n\r\n|
> [...]
> match couchdb m|^HTTP/1\.0 200 OK\r\nServer: CouchDB/(\d+\.\d+\.\d+)|
> p/Apache CouchDB/ v/$1/
>
> CouchDB is a database used by among others Ubuntu One, and will probably
> be seen increasingly on linux laptops. Http based protocol, defaults to
> port 5984.
>
> I submitted the complete signature a few days ago to the submit-page,
> but thought I might aswell make a matchline of it.

Hi Martin,

We have this signature since the most recent integration from the
submission page:

match http m|^HTTP/1\.0 200 OK\r\nServer: CouchDB/([\w._-]+) \(Erlang ([^)]*)\)\r\n| p/CouchDB httpd/ v/$1/ i/Erlang $2/

Does your server include the Erlang version? If so, then this signature
will catch it. If not, we can add another one.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/