Re: Broken service match lines

[David Fifield <david () bamsoftware com>]

On Thu, Sep 20, 2012 at 04:14:40PM -0500, Daniel Miller wrote:
> On 09/20/2012 02:48 PM, David Fifield wrote:
> > On Thu, Sep 20, 2012 at 02:32:13PM -0500, Daniel Miller wrote:
> > > And the only 4 lines in the whole file without s modifier:
> > How'd you calculate this? I find about 6,000:
> >
> > m|^S\xf5\xc6\x1a{|
> > m|^\* ACAP \(IMPLEMENTATION \"CommuniGate Pro ACAP (\d[-.\w]+)\"\) |
> > m|^ACMP Server Version ([\w._-]+)\r\n|
> > m|^Adabas D Remote Control Server Version ([\d.]+) Date [\d-]+ \(key is [0-9a-f]+\)\r\nOK> |
> > m|^<cross-domain-policy><allow-access-from domain='([^']*)' to-ports='([^']*)' /></cross-domain-policy>\0$|
> > m|^<cross-domain-policy><allow-access-from domain=\"([^\"]*)\" to-ports=\"([^\"]*)\"/></cross-domain-policy>$|
> > m|^\+Welcome to Ability FTP Server \(Admin\)\. \[20500\]\r\n|
> >
> > I checked with the attached patch to sv-tidy.py.
> >
> > sv-tidy.py -n nmap-service-probes
> >
> > David Fifield
> Sorry, 4 without the modifier that also contain something like
> .*\r\n.*, as matched by this in vim:
> \.\*\(\\r\\n\|\\n\)*\.\*[^|]*|[^s]

Oh, I see. Thanks. Would you add the s to those others as well?

> I'm also working on some simple perl scripts to try out various
> things with match lines. May end up with nothing, but I'll post the
> bits and pieces when I'm done.

Okay, please first take a look at
/nmap-private-dev/misc-scripts/sv-tidy.py, because it's already set up
to iterate over nmap-service-probes and process every line.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/