This patch adds detection for Cyrus Murder masters and slaves according
to
http://www.rfc-editor.org/rfc/rfc3656.txtOn slave servers, the master server is added to the info field.
Cheers,
--
Matt
Index: nmap-service-probes
===================================================================
--- nmap-service-probes (revision 8685)
+++ nmap-service-probes (working copy)
@@ -1035,6 +1035,9 @@
match multiplicity m|^MULTIPLICITYP$| p/Stardock Multiplicity KVM daemon/ o/Windows/
+match mupdate m|\* OK MUPDATE \"([-.\w]+)\" \"Cyrus Murder\" \"v([-.\w]+)\" \"\(master\)\"\r\n| p/Cyrus Murder Master/ h/$1/ v/$2/
+match mupdate m|\* OK MUPDATE \"([-.\w]+)\" \"Cyrus Murder\" \"v([-.\w]+)\" \"mupdate://([-.\w]+)\"\r\n| p/Cyrus Murder Slave/ h/$1/ v/$2/ i/Master: $3/
+
softmatch napster m|^1$|
match netop m|^\xd6\x81\x81\0\0\xf9\0\xf9\xee\xe3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0| p/NetOp Remote Control/
Index: nmap-services
===================================================================
--- nmap-services (revision 8685)
+++ nmap-services (working copy)
@@ -1888,6 +1889,8 @@
rendezvous 3689/tcp # Rendezvous Zeroconf (used by Apple/iTunes)
udt_os 3900/tcp # Unidata UDT OS
udt_os 3900/udp # Unidata UDT OS
+mupdate 3905/tcp # Mailbox Update (MUPDATE) protocol
+mupdate 3905/udp # Mailbox Update (MUPDATE) protocol
mapper-nodemgr 3984/tcp # MAPPER network node manager
mapper-nodemgr 3984/udp # MAPPER network node manager
mapper-mapethd 3985/tcp # MAPPER TCP/IP server
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-devArchived at
http://SecLists.Org
