OS Fingerprint Submissions

[Fyodor <fyodor () insecure org>]

Hello everyone,

I looked at the Nmap OS fingerprint submission file today and found
pages of new submissions since the ALPHA5 release.  That is good news!
But then on closer inspection, I found that probably 2/3 of them are
people submitting gen1 fingerprints with old versions of Nmap.  Even
though the submission page says in big red letters up top that we are
only accepting fingerprints from 4.20ALPHA5.  Sheesh!  So much for
expecting users to actually read the form :).

Then I looked at the remaining submissions and found that about half
of them are spam bots advertising Viagra and mortgages.  That left
just 16 valid 4.20ALPHA5+ submissions.  D'oh!  It will really help us
a lot if people can start submitting these.  Even a hundred
submissions would let us cover many of the most common operating
systems.

Some people may not be submitting because they assume their systems
(Windows XP SP2, Linux 2.6,17, etc.) are so common that someone else
will do the submission.  But actually, we want common operating
systems now even more than the esoteric stuff!  Having, say, Win XP
fingerprints for 10 different targets will help us understand which
tests vary and produce a high quality reference fingerprint.

So please give Nmap 4.20ALPHA6 a try
(http://seclists.org/nmap-dev/2006/q3/0316.html) and scan a few
machines where you are certain you know what is running.  And if Nmap
spits out a fingerprint and URL, please fill out the short form for
the system.

If there is some other reason that people aren't submitting
fingerprints, please let me know and I'll see what I can do about it.
This new system will definitely be a lot better if it can detect more
than just the machines in my office :).

Cheers,
Fyodor


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org