RE: Parsing error in services?

["Sina Bahram" <sbahram () nc rr com>]

Sounds like a plan

Take care,
Sina
 

-----Original Message-----
From: nmap-dev-bounces () insecure org [mailto:nmap-dev-bounces () insecure org]
On Behalf Of Kris Katterjohn
Sent: Sunday, August 12, 2007 3:17 PM
To: Sina Bahram
Cc: 'Nmap Dev'; 'DePriest,Jason R.'
Subject: Re: Parsing error in services?

Sina Bahram wrote:
> I've uploaded the services file to:
>
> http://www.QuantumMyst.com/nmap-service-probes
>
> Take care,
> Sina
>
> -----Original Message-----
> From: nmap-dev-bounces () insecure org 
> [mailto:nmap-dev-bounces () insecure org]
> On Behalf Of DePriest, Jason R.
> Sent: Sunday, August 12, 2007 12:50 PM
> To: Nmap Dev
> Subject: Re: Parsing error in services?
>
> On 8/7/07, Sina Bahram <> wrote:
> > I got the following when scanning a remote machine.
> >
> > Any thoughts?
> >
> > It seems like there's a syntax error in the services file.
> >
> > ***
> >
> > nmap -sV -vv xxx.xxx.xxx.xxx
> > Starting Nmap 4.21ALPHA5 ( http://insecure.org ) at 2007-08-07 18:52 
> > Eastern Daylight Time
> > Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 0 undergoing Host 
> > Discovery Initiating Parallel DNS resolution of 1 host. at 18:52 
> > Completed Parallel DNS resolution of 1 host. at 18:52, 0.02s elapsed 
> > Initiating SYN Stealth Scan at 18:52 Scanning visiontraffic.com
> > (xxx.xxx.xxx.xxx) [1705 ports] Discovered open port 53/tcp on 
> > xxx.xxx.xxx.xxx Discovered open port 80/tcp on xxx.xxx.xxx.xxx 
> > Discovered open port 25/tcp on xxx.xxx.xxx.xxx Discovered open port 
> > 443/tcp on xxx.xxx.xxx.xxx Discovered open port 22/tcp on 
> > xxx.xxx.xxx.xxx Discovered open port 21/tcp on xxx.xxx.xxx.xxx 
> > Discovered open port 3306/tcp on xxx.xxx.xxx.xxx Discovered open port 
> > 110/tcp on xxx.xxx.xxx.xxx Discovered open port 143/tcp on 
> > xxx.xxx.xxx.xxx Discovered open port 995/tcp on xxx.xxx.xxx.xxx 
> > Discovered open port 465/tcp on xxx.xxx.xxx.xxx Discovered open port 
> > 1/tcp on xxx.xxx.xxx.xxx Discovered open port 111/tcp on 
> > xxx.xxx.xxx.xxx Discovered open port 993/tcp on xxx.xxx.xxx.xxx 
> > Completed SYN Stealth Scan at 18:52, 3.45s elapsed (1705 total ports)
> > ServiceProbeMatch::InitMatch: parse error on line 854 of
> > nmap-service-probes: could not find end delimiter for regex QUITTING!
> >
> > ***
> >
> > Windows XP SP2 ... Ask for any other information.
> >
> > Take care,
> > Sina
>
> Can you post what line 854 of your service probe file looks like?
>
> Also, you can try Nmap 4.22SOC2
> http://seclists.org/nmap-dev/2007/q3/0062.html and see if your error 
> goes away.
>
> -Jason

I don't know much about the services files, but I do see something different
(I think) about that line.

Most of them have a "|" followed by "p//" and/or "v//" and/or "h//" 
which this one doesn't.

However, the current SVN version has a changed version of this line, line
870, that looks right.


Using the latest SVN, grabbing 4.22SOC2, or waiting a little bit and 
grabbing 4.22SOC3 should all work for you.


Thanks,
Kris Katterjohn

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org