1 |
4ae45b10
|
Ermal Luçi
|
# Telnet - Insecure remote login - RFC 854
|
2 |
|
|
# Pattern attributes: good veryfast fast
|
3 |
|
|
# Protocol groups: remote_access obsolete ietf_internet_standard
|
4 |
|
|
# Wiki: http://www.protocolinfo.org/wiki/Telnet
|
5 |
66f2dd0e
|
Ermal Lu?i
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
6 |
4ae45b10
|
Ermal Luçi
|
#
|
7 |
|
|
# Usually runs on port 23
|
8 |
|
|
#
|
9 |
|
|
# This pattern is lightly tested.
|
10 |
|
|
|
11 |
|
|
telnet
|
12 |
|
|
# Matches at least three IAC (Do|Will|Don't|Won't) commands in a row.
|
13 |
|
|
# My telnet client sends 9 when I connect, so this should be fine.
|
14 |
|
|
# This pattern could fail on a unchatty connection or it could be
|
15 |
|
|
# matched by something non-telnet spewing a lot of stuff in the fb-ff range.
|
16 |
|
|
^\xff[\xfb-\xfe].\xff[\xfb-\xfe].\xff[\xfb-\xfe]
|