diff options
Diffstat (limited to 'src/usr/local/share/protocols/ncp.pat')
-rw-r--r-- | src/usr/local/share/protocols/ncp.pat | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/src/usr/local/share/protocols/ncp.pat b/src/usr/local/share/protocols/ncp.pat new file mode 100644 index 0000000..55792b2 --- /dev/null +++ b/src/usr/local/share/protocols/ncp.pat @@ -0,0 +1,23 @@ +# NCP - Novell Core Protocol +# Pattern attributes: good fast fast +# Protocol groups: networking proprietary +# Wiki: http://www.protocolinfo.org/wiki/NCP +# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE +# +# This pattern has been tested and is believed to work well. + +# ncp request +# dmdt means Request +# *any length +# +# *any reply buffer size +# "" means service request +# | \x17\x17 means create a service connection +# | uu means destroy service connection + +# ncp reply +# tncp means reply +# 33 means service reply + +ncp +^(dmdt.*\x01.*(""|\x11\x11|uu)|tncp.*33) |