coydog/zmap-freebsd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
51da87c605
zmap-freebsd/examples/udp-probes
History
HD Moore 75de805f41 Add README
2013-08-16 22:15:43 -05:00
..
citrix_1604.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
db2disco_523.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
digi1_2362.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
digi2_2362.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
digi3_2362.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
dns_53.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
ipmi_623.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
mdns_5353.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
mssql_1434.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
natpmp_5351.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
netbios_137.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
ntp_123.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
pca_nq_5632.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
pca_st_5632.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
portmap_111.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
README Add README 2013-08-16 22:15:43 -05:00
sentinel_5093.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
snmp1_161.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
snmp2_161.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
upnp_1900.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
wdbrpc_17185.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00
wsd_3702.pkt Add some default udp probe files 2013-08-16 15:53:33 -05:00

README 

UDP Data Probes
======

This directory contains a set of data files that can be used with the UDP probe module.


USING:
-----

$ zmap -M udp -p 137 --probe-args=file:examples/udp-probes/netbios_137.pkt


PROBES:
-----

citrix_1604.pkt         This probe triggers a response from Citrix application discovery services on UDP port 1604
db2disco_523.pkt        This probe triggers a response from IBM DB2 discovery services on UDP port 523
digi1_2362.pkt          This probe triggers a response from Digi ADDP discovery services on UDP port 2362 (default magic)
digi2_2362.pkt          This probe triggers a response from Digi ADDP discovery services on UDP port 2362 (devkit magic)
digi3_2362.pkt          This probe triggers a response from Digi ADDP discovery services on UDP port 2362 (oem magic)
dns_53.pkt              This probe queries for the DNS vendor and version using the BIND version TXT record over UDP port 53
ipmi_623.pkt            This probe triggers a Get Channel Authentication reply from IPMI endpoints on UDP port 623
mdns_5353.pkt           This probe triggers a response from mDNS/Avahi/Bonjour discovery services on UDP port 5353
mssql_1434.pkt          This probe triggers a response from Microsoft SQL Server discovery services on UDP port 1434
natpmp_5351.pkt         This probe triggers a response from NATPMP-enabled devices on UDP port 5351
netbios_137.pkt         This probe triggers a status reply from NetBIOS services on UDP port 137
ntp_123.pkt             This probe triggers a response from NTP servies on UDP port 123
pca_nq_5632.pkt         This probe triggers a response from PC Anywhere services on UDP port 5632 (network query)
pca_st_5632.pkt         This probe triggers a response from PC Anywhere services on UDP port 5632 (status)
portmap_111.pkt         This probe triggers a response from SunRPC portmapper services on UDP port 111
sentinel_5093.pkt       This probe triggers a response from the Sentinel license manager service on UDP port 5093
snmp1_161.pkt           This probe queries for the system description field of SNMP v1 services using community string public over UDP port 161
snmp2_161.pkt           This probe queries for the system description field of aNMP v2 services using community string public over UDP port 161
upnp_1900.pkt           This probe triggers a response from UPnP SSDP services on UDP port 1900
wdbrpc_17185.pkt        This probe triggers a response from VxWorks WDBRPC services on UDP port 17185
wsd_3702.pkt            This probe triggers a response from WSD/DPWS services on UDP port 3702

NOTES:
-----

Most of these probes return useful data in the response. Parsing this data requires capturing the raw output
and decoding this using a protocol-specific dissector. In most cases, Wireshark is capable of decoding these
replies.