parse shortport.version_port_or_service

[paralax]

challenge: this is multi-arity.

• first arg is either an int or an array of ints
• second are is a string or an array of strings (optional)
• third arg is a string of protos (default tcp)
• fourth arg is a string or an array of states

examples:

/usr/share/nmap/scripts/ipmi-version.nse:portrule = shortport.version_port_or_service(623, "asf-rmcp", "udp", {"open", "open|filtered"})
/usr/share/nmap/scripts/maxdb-info.nse:portrule = shortport.version_port_or_service(7210, "maxdb", "tcp")
/usr/share/nmap/scripts/mqtt-subscribe.nse:portrule = shortport.version_port_or_service({1883, 8883}, {"mqtt", "secure-mqtt"}, "tcp")
/usr/share/nmap/scripts/murmur-version.nse:portrule = shortport.version_port_or_service({64738}, "murmur", {"tcp", "udp"})
/usr/share/nmap/scripts/nbd-info.nse:portrule = shortport.version_port_or_service(10809, "nbd", "tcp")
/usr/share/nmap/scripts/ndmp-version.nse:portrule = shortport.version_port_or_service(10000, "ndmp", "tcp")
/usr/share/nmap/scripts/netbus-version.nse:portrule = shortport.version_port_or_service ({}, "netbus", {"tcp"})
/usr/share/nmap/scripts/omron-info.nse:portrule = shortport.version_port_or_service(9600, "fins", {"tcp", "udp"})
/usr/share/nmap/scripts/openlookup-info.nse:portrule = shortport.version_port_or_service(5850, "openlookup")
/usr/share/nmap/scripts/oracle-tns-version.nse: and shortport.version_port_or_service({1521,1522,1523}, "oracle-tns")(host, port)
/usr/share/nmap/scripts/ovs-agent-version.nse:portrule = shortport.version_port_or_service({8899})
/usr/share/nmap/scripts/pptp-version.nse:portrule = shortport.version_port_or_service(1723)
/usr/share/nmap/scripts/quake3-info.nse:portrule = shortport.version_port_or_service(range(27960, 27970), {'quake3'}, 'udp')
/usr/share/nmap/scripts/rfc868-time.nse:portrule = shortport.version_port_or_service(37, "time", {"tcp", "udp"})
/usr/share/nmap/scripts/s7-info.nse:portrule = shortport.version_port_or_service(102, "iso-tsap", "tcp")
/usr/share/nmap/scripts/snmp-info.nse:portrule = shortport.version_port_or_service(161, "snmp", "udp")
/usr/share/nmap/scripts/stun-version.nse:portrule = shortport.version_port_or_service(3478, "stun", "udp")
/usr/share/nmap/scripts/teamspeak2-version.nse:portrule = shortport.version_port_or_service({8767}, "teamspeak2", "udp")
/usr/share/nmap/scripts/ventrilo-info.nse:portrule = shortport.version_port_or_service({3784}, "ventrilo", {"tcp", "udp"})
/usr/share/nmap/scripts/wdb-version.nse:portrule = shortport.version_port_or_service(17185, "wdbrpc", {"udp"} )
/usr/share/nmap/scripts/weblogic-t3-info.nse: return shortport.version_port_or_service({7001,7002,7003},"http")(host,port)
/usr/share/nmap/scripts/xmpp-info.nse:portrule = shortport.version_port_or_service({5222, 5269}, {"jabber", "xmpp-client", "xmpp-server"})

found in ike-version scfript.

• need port to popular RPORT
• need proto (tcp, udp)