Re: Edit nmap database for os detection

[Jacek Wielemborek <d33tah () gmail com>]

W dniu 25.07.2015 o 22:29, Tien To Tran pisze:
> Hi all :)
>
> I try to discover a network topology by using nmap. Part of the job is
> detect device type.
>
> I want to add my device information into the nmap database (which is not
> available before). Of course, I know we can submit and wait an update from
> the developers, but that costs much time, and some of my devices can't be
> public for security reason.
>
> This is the fingerprint I got:
>
> OS:SCAN(V=6.49BETA4%E=4%D=7/25%OT=21%CT=1%CU=37287%PV=Y%DS=1%DC=D%G=Y%M=002
> OS:3CD%TM=55B3910D%P=i686-pc-linux-gnu)SEQ(TI=I%CI=I%TS=U)SEQ(CI=I%TS=U)OPS
> OS:(O1=M578%O2=M578%O3=M578%O4=%O5=%O6=)WIN(W1=AF0%W2=AF0%W3=AF0%W4=0%W5=0%
> OS:W6=0)ECN(R=Y%DF=N%T=FE%W=0%O=%CC=Y%Q=)T1(R=Y%DF=N%T=FE%S=O%A=S+%F=AS%RD=
> OS:0%Q=)T2(R=Y%DF=N%T=FE%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)T3(R=Y%DF=N%T=FE%W=0%S
> OS:=Z%A=S+%F=AR%O=%RD=0%Q=)T4(R=Y%DF=N%T=FE%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R
> OS:=Y%DF=N%T=FE%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=N%T=FE%W=0%S=A%A=Z%F
> OS:=R%O=%RD=0%Q=)T7(R=Y%DF=N%T=FE%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)U1(R=Y%DF=N%T
> OS:=FE%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=FE%CD=S
> OS:)
>
> I reformat it:
>
> # router TPLINK TD-8817 -O ip_addr
> Fingerprint TPLINK TD-8817 ADSL modem
> Class TPLINK | embedded || broadband router
> CPE cpe:/h:tplink:td8817
> SEQ(CI=I%TS=U%CI=RD%II=I%TS=U)
> OPS(O1=M578%O2=%O3=%O4=%O5=%O6=)
> WIN(W1=AF0%W2=0%W3=0%W4=0%W5=0%W6=0)
> ECN(R=Y%DF=N%T=FE%W=0%O=%CC=Y%Q=)
> T1(R=Y%DF=N%T=FE%S=O%A=S+%F=AS%RD=0%Q=)
> T2(R=Y%DF=N%T=FE%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
> T3(R=Y%DF=N%T=FE%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> T4(R=Y%DF=N%T=FE%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T5(R=Y%DF=N%T=FE%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
> T6(R=Y%DF=N%T=FE%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
> T7(R=Y%DF=N%T=FE%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
> U1(R=Y%DF=N%T=FE%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
> IE(R=Y%DFI=N%T=FE%CD=S)
>
> However, it makes nmap -O ip_addr crashed. Are there any reliable way to
> update the database ourselves?
>
>
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/

Hello,

This is documented here:

https://nmap.org/book/osdetect.html

What is the crash you are getting?

Cheers,
d33tah

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/