Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Service Detection: IBM DB2 Database Server
From: Tom Sellers <nmap () fadedcode net>
Date: Thu, 12 Jun 2008 21:16:54 -0500

I have attached a file containing probes and match lines that detect IBM
DB2 Database server.  This should allow for the detection of DB2 ranging
from 5.x.x to 9.x.x.  Two of the match lines will return the version of
DB2 with the 3rd only detecting the service.

The primary DB2 port is TCP 523, with other services listening on 50000
and sometimes 50001.  The proper query to 523 will reveal the DB platform,
database names, file system path for the database, and network ports (50001,etc)
I intend to write a NSE script that will acquire this information and
display it.  There are also more detailed version and build details that
are encoded in EBCDIC that the script could pull out as well.

Also, thanks to Brandon Enright for providing several PCRE tips for this
and prior submissions.


Tom

Attachment: db2_probe.txt
Description:


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]