From 1d9bf8bef5f8039c0f9af71e5c9f8bd5c1a0a244 Mon Sep 17 00:00:00 2001
From: david <david@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Fri, 1 Apr 2011 06:17:15 +0000
Subject: [PATCH] Expanded Amazon pattern for http-affiliate-id from Daniel
 Miller.

---
 scripts/http-affiliate-id.nse | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/http-affiliate-id.nse b/scripts/http-affiliate-id.nse
index 1e7ba7f74..b6e0db77f 100644
--- a/scripts/http-affiliate-id.nse
+++ b/scripts/http-affiliate-id.nse
@@ -38,7 +38,7 @@ require 'stdnse'
 local AFFILIATE_PATTERNS = {
 	["Google Analytics ID"] = "(?P<id>UA-[0-9]{6,9}-[0-9]{1,2})",
 	["Google Adsense ID"] = "(?P<id>pub-[0-9]{16,16})",
-	["Amazon Associates ID"] = "href=\"http://www.amazon.com/[^\"]*[\\?&;]tag=(?P<id>\\w+-\\d+)",
+	["Amazon Associates ID"] = "http://(www\.amazon\.com/[^\"']*[\\?&;]tag|rcm\.amazon\.com/[^\"']*[\\?&;]t)=(?P<id>\\w+-\\d+)",
 }
 
 portrule = shortport.http