Re: Service fingerprint integration highlights

[David Fifield <david () bamsoftware com>]

On Sat, Nov 26, 2016 at 10:58:54AM -0600, Daniel Miller wrote:
> This database server, 4th Dimension, is 32 years old and only just now starting
> to show up in our service database!
> +match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: 4D_v(\d+)/(\1\.\d+)\r\n| p/4D RDBMS web server/ v/$2/ 
> cpe:/a:4d_sas:4d:$2/
> +match http m|^HTTP/1\.1 \d\d\d .*\r\nServer: 4D/([\d.]+)\r\n|s p/4D RDBMS web server/ v/$1/ cpe:/a:4d_sas:4d:$1/

Might be the same system as this existing NULL probe match? It was added
in 2009.

match 4d-server 
m|^\0\0\0H\0\0\0\x02.[^\0]*\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$|s p/4th 
Dimension database server/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/