Nmap Development mailing list archives

nmap 4.68 signature mismatch


From: Aaron Leininger <rilian4 () hotmail com>
Date: Mon, 14 Jul 2008 12:16:18 -0700


I ran myrootprompt# nmap -A -T4 mytargetip on a machine that is a known windows 2000 w/ SP4 workstation and it came 
back with: "Running: Microsoft Windows 2003" as an OS detection response. 

I then ran: nmap -v -d1 -A -T4 mytargetip which generated the OS signature below. 

OS details: Microsoft Windows Server 2003 SP2, SP3, or SP4
OS Fingerprint:
OS:SCAN(V=4.68%D=7/14%OT=135%CT=1%CU=35775%PV=Y%DS=1%G=Y%TM=487BA23E%P=i686
OS:-pc-linux-gnu)SEQ(SP=101%GCD=1%ISR=108%TI=I%II=I%SS=S%TS=0)OPS(O1=M5B4NW
OS:0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4N
OS:W0NNT00NNS%O6=M5B4NNT00NNS)WIN(W1=4470%W2=41A0%W3=4100%W4=40E8%W5=40E8%W
OS:6=402E)ECN(R=Y%DF=Y%T=80%W=4470%O=M5B4NW0NNS%CC=N%Q=)T1(R=Y%DF=Y%T=80%S=
OS:O%A=S+%F=AS%RD=0%Q=)T2(R=Y%DF=N%T=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)T3(R=Y%
OS:DF=Y%T=80%W=402E%S=O%A=S+%F=AS%O=M5B4NW0NNT00NNS%RD=0%Q=)T4(R=Y%DF=N%T=8
OS:0%W=0%S=A%A=O%F=R%O=%RD=0%Q=)T5(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%
OS:Q=)T6(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)T7(R=Y%DF=N%T=80%W=0%S=Z%
OS:A=S+%F=AR%O=%RD=0%Q=)U1(R=Y%DF=N%T=80%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIP
OS:CK=G%RUCK=G%RUL=G%RUD=G)IE(R=Y%DFI=S%T=80%TOSI=Z%CD=Z%SI=S%DLI=S)

If this isn't enough info or the correct info, let me know what command to run and I'll pass along the results. 
Aaron
_________________________________________________________________
Need to know now? Get instant answers with Windows Live Messenger.
http://www.windowslive.com/messenger/connect_your_way.html?ocid=TXT_TAGLM_WL_messenger_072008

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: