Re: new quake3-info script

[David Fifield <david () bamsoftware com>]

On Sun, Apr 10, 2011 at 04:15:43AM +0300, Toni Ruottu wrote:
>   hello
>
> Find attached the new info script for extracting information from
> Quake3-like game servers.
>
> You can run a compatible server by doing...
> apt-get install tremulous-server
> tremulous-server
>
> And try out the script as follows...
> nmap -sU -sV --script quake3-info.nse -Pn 127.0.0.1 -p 30720

I didn't find tremulous-server in Debian wheezy, but there was
openarena-server. The script (nor the UDP payload) seems not to get a
response.

# ./nmap -sU localhost -p 27960 -d  --script=quake3-info --packet-trace

NSE: Starting quake3-info against 127.0.0.1:27960.
Initiating NSE at 00:17
NSOCK (2.1350s) UDP connection requested to 127.0.0.1:27960 (IOD #1) EID 8
NSOCK (2.1350s) Callback: CONNECT SUCCESS for EID 8 [127.0.0.1:27960]
NSE: UDP 127.0.0.1:58987 > 127.0.0.1:27960 | CONNECT
NSE: UDP 127.0.0.1:58987 > 127.0.0.1:27960 | 00000000: ff ff ff ff 67 65 74 73 74 61 74 75 73 0a           getstatus

NSOCK (2.1350s) Write request for 14 bytes to IOD #1 EID 19 [127.0.0.1:27960]: ....getstatus.
NSOCK (2.1350s) Callback: WRITE SUCCESS for EID 19 [127.0.0.1:27960]
NSE: UDP 127.0.0.1:58987 > 127.0.0.1:27960 | SEND
NSOCK (2.1350s) Read request from IOD #1 [127.0.0.1:27960] (timeout: 30000ms) EID 26
NSOCK (32.1350s) Callback: READ TIMEOUT for EID 26 [127.0.0.1:27960]
NSE: UDP 127.0.0.1:58987 > 127.0.0.1:27960 | CLOSE
NSE: Finished quake3-info against 127.0.0.1:27960.
Completed NSE at 00:17, 30.00s elapsed
Nmap scan report for localhost (127.0.0.1)
Host is up, received localhost-response.
Scanned at 2011-09-21 00:17:03 PDT for 33s
PORT      STATE         SERVICE REASON
27960/udp open|filtered quake3  no-response

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/