Service Detection: NEC IPK II HTTP / SIP end points

[Tom Sellers <nmap () fadedcode net>]

I have attached a couple of match lines.  The first is for the HTTP management
interface for the IPK II line of NEC voice equipment.  The service listens on
port 80.  This match line should go into the GetRequest section.

The second set of match lines are SIP related. They are matches to responses
from the SIPOptions probe on port 5060. They are slightly modified versions
of the SIP match lines that I sent a couple of months ago.  They have not been
included in the official nmap-service-probes file so far.

One of the matches handles responses from Cisco SIP gateway services and returns
the product, IOS version and status.  The other two matches are soft matches that
handle generic SIP endpoints.  These have been tested against the NEC product
mentioned above as well as Cisco and Tandberg equipment.


Tom

Attachment: nec_ipk_and_sip.txt
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org