#62 qq patterns match with interbase database 1.0.3

open
patterns (14)
5
2008-11-10
2008-11-10
Anonymous
No

Environment - DEBIAN 4.0
kernel: 2.6.25
iptables: 1.4.1.1
Protocol definitions: 2008-11-08
l7-filter kernel version: 2.20

DB server : FirebirdSS-1.0.3.972-0

Discussion

  • Matthew Strait
    Matthew Strait
    2008-11-23

    I'm not at all familiar with Interbase. Can you suggest any way to distinguish between it and QQ? The QQ pattern is, generally, pretty hard to match on randomly (about 0.04% of random connections), but it's certainly possible that Interbase coincidentally uses the same bytes in the same places.