Re: Sun Service Tags Nmap Discovery script

[David Fifield <david () bamsoftware com>]

On Thu, Jan 13, 2011 at 10:24:50AM +1100, Matthew Flanagan wrote:
> On 11 January 2011 15:57, David Fifield <david () bamsoftware com> wrote:
> > It is definitely something we can include. We just haven't gotten any
> > feedback yet.
> >
> > I found out that service tags is installed by default in OpenSolaris. I
> > booted osol-0906-x86.iso in text mode (no need to install), then ran
> >
> > $ svcadm enable '*std*'
>
> There are two services that need to be running: stdiscover and stlisten. Run:
>
> $ svcs stdiscover stlisten
>
> to check their status.

Thanks for that. I was able to test again after enabling both these
services and it worked well for me. I've committed your script now.
Thanks for your contribution!

> > I intended '*std*' to match in.stdiscover, but I'm not sure that's what
> > it's doing. Anyway, it opens port 6481. I ran the script and got this
> > error:
> >
> > Discovered open port 6481/udp on 10.0.2.15
> > NSE: 'servicetags' (thread: 0x8e75ca0) against 10.0.2.15:6481 threw an error!
> > ERROR
> > stack traceback:
> >        [C]: in function 'try'
> >        ./scripts/servicetags.nse:141: in function <./scripts/servicetags.nse:83>
> >        (tail call): ?
> >
> > I'm attaching a packet capture. The scanning machine sends
> > "[PROBE] 1294721585\r\n" and receives " 6481\n".
>
> That is not a valid response according the the spec. Probably because
> stlisten is not running.

Nevertheless, the script shouldn't crash and lose the information that
the UDP port is open. I changed the script so it can still return even
if the HTTP parts fail.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/