Service Probe to detect BMC mainview

["qhardyfr () gmail com" <qhardyfr () gmail com>]

Hello,

These following lines can be added in the *nmap-service-probes* file in
order to detect *BMC MAINVIEW* services listening (
http://documents.bmc.com/products/documents/71/92/107192/107192.pdf).





*#It detects BMC MAINVIEW services#Information:
http://documents.bmc.com/products/documents/71/92/107192/107192.pdf
<http://documents.bmc.com/products/documents/71/92/107192/107192.pdf>Probe
TCP mainview
q|\x00\x20\x43\x4f\x4e\x54\x52\x4f\x4c\x2c\x36\x2c\x36\x2e\x30\x2e\x30\x31\x2e\x39\x36\x35\x39\x2c\x66\x72\x46\x52\x2c\x4c\x43\x44\x2d\x59\x00\x00|ports
3940match mainview m|^\x00P@READY,([\d.]+),(.*)\x00\x00$| p/BMC MainView
for zOS/ v/$1/*

Without this probe, the following line appears in nmap results when there
is a BMC mainview service listening on the port 3940:
3940/tcp  open     xecp-node?

I hope this probe will help.

--
Quentin HARDY

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/