Re: fingerprintable Cisco IOS versions

[David Fifield <david () bamsoftware com>]

On Mon, Oct 29, 2012 at 11:09:14AM +0800, Raymond Lo wrote:
> Hi
>
> May I know what is the cutoff Cisco IOS versions in the NMAP fingerprint
> database ?
>
> For example, it seems that the oldest IOS version in the NMAP fingerprint
> database is Cisco 2500 (68030) IGS-I-L, Version 11.1(24).

It looks like the oldest is 10.3.

# IOS (tm) 3000 Software (IGS-I-L), Version 10.3(7), RELEASE SOFTWARE (fc1)
Fingerprint Cisco 3000 switch (IOS 10.3)
Class Cisco | IOS | 10.X | switch
CPE cpe:/h:cisco:catalyst_3000
CPE cpe:/o:cisco:ios:10.3

There is not specific cutoff. We only have the fingerprints that users
submit.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/