From 22ae4ae10878512690211e01ed5fcce7e4d01f92 Mon Sep 17 00:00:00 2001 From: tomsellers Date: Wed, 4 Jul 2012 17:09:21 +0000 Subject: [PATCH] Added couchbase matchline that does not require a database name. This is useful when the service response is so large that the database info is pushed outside the capture buffer. This was added *after* the matchline that captures the dbname if it is present. Also added space and a ':' to the database name capture character set to allow for when the database is on a windows server. --- nmap-service-probes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/nmap-service-probes b/nmap-service-probes index 47f716156..aa6ef220e 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -11247,7 +11247,8 @@ match tarantool m|---\r\ninfo:\r\n version: \"([^\"]*)\"\r\n uptime: (\d*)\r\n Probe TCP couchbase-data q|\x80\x10\0\0\0\0\0\0\0\0\0\0\x15\xf0\xd1\x62\0\0\0\0\0\0\0\0| rarity 8 ports 11210 -match couchbase-tap m|^\x81\x10..\0\0\0\0\0\0\0.....\0\0\0\0\0\0\0\0ep_version([._\w]+).*ep_dbname([_\\\/\w]*)|s p/Couchbase Membase/ v/$1/ i/DB name: $2/ +match couchbase-tap m|^\x81\x10..\0\0\0\0\0\0\0.....\0\0\0\0\0\0\0\0ep_version([._\w]+).*ep_dbname([_\\\/\w\s:]*)|s p/Couchbase Membase/ v/$1/ i/DB name: $2/ +match couchbase-tap m|^\x81\x10..\0\0\0\0\0\0\0.....\0\0\0\0\0\0\0\0ep_version([._\w]+)|s p/Couchbase Membase/ v/$1/ ##############################NEXT PROBE############################## # Sends a Get all registered names probe to the EPMD daemon