diff --git a/nmap-service-probes b/nmap-service-probes index 9285aa0ea..d9e41fc64 100644 --- a/nmap-service-probes +++ b/nmap-service-probes @@ -5301,6 +5301,14 @@ match ldap m|^0\.\x02\x01\x01a\)\n\x010\x04\0\x04\"Failed, anonymous bind not al # This came off a KIRK Wireless VoIP adapter which I *think* uses Cisco LDAP ?? match ldap m|^0\x0c\x02\x01\x01a\x07\n\x011\x04\0\x04\0$| p/Cisco LDAP server/ +# This probe sends a SIP OPTIONS request. +# Most of the numbers, usernames, and hostnames are abitrary. +##############################NEXT PROBE############################## +Probe TCP SIPOptions q|OPTIONS sip:nm SIP/2.0\r\nVia: SIP/2.0/TCP nm;branch=foo\r\nFrom: ;tag=root\r\nTo: \r\nCall-ID: 50000\r\nCSeq: 42 OPTIONS\r\nMax-Forwards: 70\r\nContent-Length: 0\r\nContact: \r\nAccept: application/sdp\r\n\r\n| +rarity 5 +ports 5060 + + ##############################NEXT PROBE############################## Probe TCP LANDesk-RC q|\x54\x4e\x4d\x50\x04\0\0\0\x54\x4e\x4d\x45\0\0\x04\0| rarity 6