-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathdsniff.magic
127 lines (101 loc) · 2.21 KB
/
dsniff.magic
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
# $Id: dsniff.magic,v 1.8 2000/07/19 03:22:02 dugsong Exp $
#
# Network protocol magic(5) for dsniff.
#
#0 string FLAPON aim
0 string BEGIN\ cvs
0 string SYST ftp
0 string USER\ ftp ftp
0 string USER\ anonymous ftp
0 string HELO\ smtp
0 string EHLO\ smtp
0 string GET\ / http
0 string POST\ / http
0 string CONNECT\ http
1 string \ ID\ imap
2 string \ ID\ imap
3 string \ ID\ imap
4 string \ ID\ imap
5 string \ ID\ imap
1 string \ LOGIN\ imap
2 string \ LOGIN\ imap
3 string \ LOGIN\ imap
4 string \ LOGIN\ imap
5 string \ LOGIN\ imap
1 string \ AUTHENTICATE\ PLAIN\ imap
2 string \ AUTHENTICATE\ PLAIN\ imap
3 string \ AUTHENTICATE\ PLAIN\ imap
4 string \ AUTHENTICATE\ PLAIN\ imap
5 string \ AUTHENTICATE\ PLAIN\ imap
0 string NICK\ irc
0 string USER\ pop
0 string AUTH\ pop
12 string MIT-MAGIC x11
0 string LIST nntp
0 string GROUP nntp
0 string NEW nntp
0 string ARTICLE nntp
0 belong 0x7f7f4943
>4 beshort 0x4100 citrix
#0 belong 0x0200e803 icq
0 beshort 0x1603
>2 byte 0x01
>>5 byte 0x01
>>>9 byte 0x03 https
8 belong 0x0135012c
>12 belong 0x0c010800
>>16 belong 0x7fff7f08
>>>20 belong 0x00000001 oracle
0 belong 0x0
>4 byte 0x8d pcanywhere
>5 byte 0x6 pcanywhere
132 belong 0x0301060a
>242 belong 0 tds
32 belong 0xe0031000
>36 belong 0x2c010000 tds
12 belong 100000
>4 belong 0
>>8 belong 2 portmap
12 belong 100005
>4 belong 0
>>8 belong 2 mountd
12 belong 100009
>4 belong 0
>>8 belong 2 yppasswd
16 belong 100000
>8 belong 0
>>12 belong 2 portmap
16 belong 100005
>8 belong 0
>>12 belong 2 mountd
16 belong 100009
>8 belong 0
>>12 belong 2 yppasswd
0 belong 296
>4 belong 0x20000 postgresql
0 belong 0x81000048
>33 string CACA smb
0 beshort >0xfff9
>2 byte <40
>>3 beshort >0xfff9
>>>5 byte <40 telnet
0 string SSH- ssh
#2 leshort 2
#>(0.b+6) leshort 208 napster
#>(0.b+6) leshort 2 napster
0 byte 0x38
>8 belong 0x00002455 mmxp
0 byte 5
>6 leshort 260
>>32 byte 0 sniffer
>6 leshort 261
>>32 lelong -1 sniffer
>1 belong 0
>>5 byte 0 icq
>(1.b+1) byte 1 socks
0 byte&0x1f 16
>2 byte&0x1f 2
>>5 byte 0x60 ldap
>4 byte&0x1f 2
>>5 beshort&0xfffc 0x0100
>>>7 byte&0x1f 4 snmp