Re: Broken service match lines

[Daniel Miller <bonsaiviking () gmail com>]

On 09/20/2012 02:48 PM, David Fifield wrote:
> On Thu, Sep 20, 2012 at 02:32:13PM -0500, Daniel Miller wrote:
> > And the only 4 lines in the whole file without s modifier:
> How'd you calculate this? I find about 6,000:
>
> m|^S\xf5\xc6\x1a{|
> m|^\* ACAP \(IMPLEMENTATION \"CommuniGate Pro ACAP (\d[-.\w]+)\"\) |
> m|^ACMP Server Version ([\w._-]+)\r\n|
> m|^Adabas D Remote Control Server Version ([\d.]+) Date [\d-]+ \(key is [0-9a-f]+\)\r\nOK> |
> m|^<cross-domain-policy><allow-access-from domain='([^']*)' to-ports='([^']*)' /></cross-domain-policy>\0$|
> m|^<cross-domain-policy><allow-access-from domain=\"([^\"]*)\" to-ports=\"([^\"]*)\"/></cross-domain-policy>$|
> m|^\+Welcome to Ability FTP Server \(Admin\)\. \[20500\]\r\n|
>
> I checked with the attached patch to sv-tidy.py.
>
> sv-tidy.py -n nmap-service-probes
>
> David Fifield
Sorry, 4 without the modifier that also contain something like .*\r\n.*, 
as matched by this in vim: \.\*\(\\r\\n\|\\n\)*\.\*[^|]*|[^s]

I'm also working on some simple perl scripts to try out various things 
with match lines. May end up with nothing, but I'll post the bits and 
pieces when I'm done.

Dan
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/