Nmap Development mailing list archives

Re: Nmap 4.85BETA4 released!


From: David Fifield <david () bamsoftware com>
Date: Sun, 15 Mar 2009 21:44:10 -0600

On Sun, Mar 15, 2009 at 09:56:53PM -0500, DePriest, Jason R. wrote:
On Sun, Mar 15, 2009 at 6:40 PM, Fyodor <> wrote:
o There is a new OS detection test named SEQ.CI. Like TI and II, CI
 classifies the target's IP ID sequence generation algorithm. CI is
 based on the responses received to the probes sent to a closed port.
 The algorithm for closed ports has been observed to differ from that
 for open ports on some operating systems (though we don't yet know
 which ones).  The new test won't have an effect until new
 fingerprints containing it are added to nmap-os-db. We got the idea
 from some notes sent in by Dario Ciccarone. [David,Fyodor]

Do you need people to resubmit already detected OSes to take advantage
of the new test?

Yes, especially if you find an OS where the TI and CI results differ.
Even if it's a 100% match, just run with -d and submit the new print.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

Current thread: