From 0c937eec65416efaa3f14cc3a08ac019b2b992b3 Mon Sep 17 00:00:00 2001 From: bmenrigh Date: Tue, 9 Jun 2009 20:09:09 +0000 Subject: [PATCH] Updated the slow ser2net match that we had with the original fingerprint submission. The service was telnet and so the protocol has been changed to telnet and ser2net has been put into the product field. --- nmap-service-probes | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/nmap-service-probes b/nmap-service-probes index f1daab51b..bae47896b 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -1652,12 +1652,6 @@ match securepath m|^Unauthorized client; connection refused\n| p/HP Storage match service-monitor m|^\0\0\0\x18\0\0..\0\0..\xff\xff\xff\xff\xff\xff\xff\xff\0\0\0\x02\0\0\0\0\0\0\0.([^\0]+)\0|s p/CA Spectrum/ i/User $1/ match service-monitor m|^550 Bad syntax\. Go away\.\n$| p/CA Spectrum/ -# We should probably comment out this match. It doesn't have an anchor -# and is one of our SLOWEST matches. With a better submission we could -# probably make a much better match (with an anchor). -- Brandon -match ser2net m|\r\nser2net port \d+ device (/dev/[-\w_]+) \[\d+ \w+\] \(Debian GNU/Linux\)\r\n|s p/serial to network proxy/ i/Debian; serial port $1/ o/Linux/ -match ser2net m|^Port's device already in use\n\r$| p/serial to network proxy/ i/device in use/ - match slnp m|^220 SLNP (\w+)@[vV]ersion:[\s]?V?([^@]+)@((user:[^@]+@)?pid:[\d]+)\n$| p/Sisis $1/ v/$2/ i/$3/ o/Unix/ match starutil m|^star-v3 utility server\n\0| p/StarUTIL router config/ v/3/ d/router/ @@ -2762,6 +2756,8 @@ match telnet m|^\xff\xfd\x01\xff\xfd!\xff\xfb\x01\xff\xfb\x03 match telnet m|^\xff\xfb\x01\xff\xfb\x03Welcome to the Agilent PNA Network Analyzer at ([\w-_.]+)\r\n\r\nSCPI> | p/Agilent PNA Network Analyzer SCPI telnetd/ d/specialized/ h/$1/ match telnet m=^\xff\xfb\x01\xff\xfb\x03\r\n\r\n#\r\n\| ELSA LANCOM DSL/([\w-_.]+) Office\r\n\| Ver\. ([\w-_.]+) / ([\w-_.]+)\r\n\| SN\. (\w+)\r\n\| Copyright \(c\) ELSA AG, Aachen\r\n\r\n= p|ELSA Lancom DSL/$1 Office router telnetd| d/router/ v/$2 $3/ i/Serial $4/ match telnet m|^\n\rCMI SEC\n\rProgram: +\d+\n\rMajor\.Minor\.Rel: ([\w-_.]+)\n\rMAC Address: ([\w:]+)\n\r\n\rPress to go into setup mode\.| p/ADP IP Timeclock telnetd/ v/$1/ i/MAC $2/ d/specialized/ +match telnet m|^\xff\xfb\x03\xff\xfb\x01\xff\xfe\x01\xff\xfd\0\r\nser2net port \d+ device (/dev/[-\w_]+) \[\d+ \w+\] \(Debian GNU/Linux\)\r\n|s p/ser2net telnetd/ i/Debian; serial port $1/ o/Linux/ +match telnet m|^Port's device already in use\n\r$| p/ser2net telnetd/ i/device in use/ match telnet-proxy m|^nodnsquery/[\d.]+ is not authorized to use the telnet proxy\r\n| p/Gauntlet telnet proxy/ match telnet-proxy m|^Eingabe Servername\[:Port\] : | p/JanaServer telnet proxy/ i/German/