nmap-service-probes - XDMCP support

[Dominic <dominic () anquan co uk>]

####
Probe UDP xdmcp q|\0\x01\0\x02\0\x01\0\0|
ports 177

# simple match: differentiates between willing and unwilling only
#match xdmcp m/^\0\x01\0\x05/ v/XDMCP/willing//
#match xdmcp m/^\0\x01\0\x06/ v/XDMCP/unwilling//

# more complex match: prints out hostname and status fields too
match xdmcp m/^\0\x01\0\x05..\0\0\0.(.+)\0.(.+)/ v/XDMCP/host $1 willing/Status: $2/
match xdmcp m/^\0\x01\0\x06..\0.(.+)\0.(.+)/ v/XDMCP/host $1 unwilling/Status: $2/
####

The more complex one has worked well for me; tested against
various solaris and linux (debian) hosts.

See http://www.xfree86.org/snapshot/xdmcp.pdf for more details.

Cheers

-dominic


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org