November 2010 OS detection highlights

[David Fifield <david () bamsoftware com>]

Here are highlights from the latest round of OS signature submissions,
up until November 30, 2010.

Line count went from 46684 to 53269 (+6585, +14%).
Fingerprint count went from 2608 to 2982 (+374, +14%).

New vendors:
Acme Packet, Agfa, Atcom, Axcient, BT, British Gas, Burny, Bush,
Ceedtec, Conceptronic, DragonWave, Endian, Fuji, Fujian Ruijie,
Funkwerk, Gennet, IEI, IGEL, Interflex, Kodak, Leolink, Logitech, Lorex,
Maipu, Meru, NTI, OpenIndiana, PacketFront, Promise, Rio, Roberts,
Ruckus, Symbian OS, Tahoe, TechniSat, TippingPoint, Tranzeo, Ubiquiti,
Visual Network Systems, Westell, nCircle.
Removed vendors:
Compex, Hitachi, Inter-tel.

Linux 2.6.34 - 2.6.37
OpenBSD 4.8
        New OS versions.

AmigaOS 3.1
Minix 2.0.4
        Old OS versions.

Apple iPhone OS 3.1.2 - iOS 4.2.1
        Wikipedia says that the name changed from "iPhone OS" to "iOS"
        with version 3.2.2. That's the convention I've followed so far.
        Or would it be better to use a uniform name for all versions?

GNU Hurd 0.3
        Our second Hurd fingerprint.

Sun Solaris 11 (snv_151a) or OpenIndiana oi_147
        OpenIndiana is a fork of the cancelled OpenSolaris.
        http://openindiana.org/
        http://opensolaris.org/jive/thread.jspa?threadID=133043&tstart=0
OPS(O1=ST11M5B4NW1%O2=ST11M5B4NW1%O3=NNT11M5B4NW1%O4=ST11M5B4NW1%O5=ST11M5B4NW1%O6=ST11M5B4)
        Interestingly, their latest fingerprints have an unusal ordering
        of TCP options. Linux did the same thing in version 2.6.27 but
        it had to be quickly undone because it caused problems with
        networking equipment. I wrote about that at
        http://seclists.org/nmap-dev/2008/q4/471.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/