From 94bd90bc2e349b2a80f9f422735ed265fcd144a8 Mon Sep 17 00:00:00 2001 From: dmiller Date: Sun, 8 Nov 2015 03:11:26 +0000 Subject: [PATCH] Fix a typo in tn3270 match. http://seclists.org/nmap-dev/2015/q4/109 --- nmap-service-probes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nmap-service-probes b/nmap-service-probes index ac2894dc0..09c53c205 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -14302,7 +14302,7 @@ ports 23,2323,2023,623 sslports 992 # IAC DO TERMINAL TYPE, IAC SB TERMINAL TYPE SEND SE, .*, IAC DO EOR -match tn3270 m|^\xff\xfd\x18\xff\xfa\x18\x01\xff\xf0\x18.*\xff\xfd\x19| p/IBM Telnet TN3270/ i/traditional tn3270/ +match tn3270 m|^\xff\xfd\x18\xff\xfa\x18\x01\xff\xf0.*?\xff\xfd\x19| p/IBM Telnet TN3270/ i/traditional tn3270/ # Hack to force the softmatch in NULL probe to allow this probe to be sent as a followup. Don't expect this will really match anything. softmatch telnet m|^\xff\xfd\x18$|