Re: [PATCH] nmap-service-probes: Misc database corrections, printer additions

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 26 Feb 2009 18:30:00 -0600
Tom Sellers <nmap () fadedcode net> wrote:

> 4.  Adds a match for IPDS (IBM's Intelligent Printer Data Stream)
> service on port 9600/tcp on IBM and Lexmark printers.  It just
> happens that the STOMP probe triggers a response when --version-all
> is used (it doesn't normally hit port 9600).  Nothing else seems to
> elict a response.

Hey Tom, with Aaron's help and a lot of reading, I have a few probes
for you to test.

These aren't meant to be production ready or anything like that.  I
have a few more ideas and I think with the appropriate use of softmatch
and fallback we can come up with a pretty good probe suite.

I'm pretty sure the error you matched on and the error I've been
matching on is actually a postscript processing error.

It seems most printers speak the HP PJL (printer job language) on port
9100.  This is just a Job control language and it encapsulates other
languages like PCL (printer command language) which in turn send things
like postscript to the printer.

My current thinking is that we will make a few different probes, a PJL,
a PCL, a XEX, and a IPDS.  I haven't started on IPDS but here is the
spec:

http://publibfp.boulder.ibm.com/epubs/pdf/ha3r6mst.pdf

I'd like to know if either of the probes I have so far get anything out
of your IBM printer.  You may need to add port 9600 to the hp-pjc probe.

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkmokekACgkQqaGPzAsl94LHbACguzaKNlLIO0KG7UQFQzCsmp/e
UUQAoIMPUiO3OXvDzwBeDW6BtR23XWh0
=vnof
-----END PGP SIGNATURE-----

Attachment: printtest.diff
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org