Re: nmap: OS hints from service versions

["Luis MartinGarcia." <luis.mgarc () gmail com>]

On 05/08/2011 09:47 PM, Toni Ruottu wrote:
> The OS detection is trying to detect the OS of the host. The services
> might all be running on different operating systems because of
> virtualization and port forwarding.

If that was the case, Nmap would have trouble detecting the remote OS,
because the OS detection probe replies that Nmap uses to distinguish
between one OS or the other, would have been produced by different
systems, and therefore, have different signatures.

I guess the OS detection engine does not accept hints because it
operates at the network and transport layers, not at the application
layer, and mixing everything up, would result in a complicated and messy
detection engine. However, this is just my opinion, Fyodor and David may
have a different one.

Regards,

Luis MartinGarcia.

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/