diff options
Diffstat (limited to 'usr/local/share/protocols/ncp.pat')
-rw-r--r-- | usr/local/share/protocols/ncp.pat | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/usr/local/share/protocols/ncp.pat b/usr/local/share/protocols/ncp.pat new file mode 100644 index 0000000..b4788a1 --- /dev/null +++ b/usr/local/share/protocols/ncp.pat @@ -0,0 +1,22 @@ +# NCP - Novell Core Protocol +# Pattern attributes: good veryfast fast +# Protocol groups: networking proprietary +# Wiki: http://www.protocolinfo.org/wiki/NCP +# +# This pattern has been tested and is believed to work well. + +# ncp request +# dmdt means Request +# *any length +# +# *any reply buffer size +# "" means service request +# | \x17\x17 means create a service connection +# | uu means destroy service connection + +# ncp reply +# tncp means reply +# 33 means service reply + +ncp +^(dmdt.*\x01.*(""|\x11\x11|uu)|tncp.*33) |