Security Basics mailing list archives

Re: When nmap can't ID the OS...


From: Jimi Thompson <jimi.thompson () gmail com>
Date: Tue, 30 Nov 2004 22:12:44 -0600

Are you by any chance running NMAP on Windows?  If so, you might try
using the Linux/Unix version instead and see if you don't get better
results.

2 cents,

Jimi


On 27 Nov 2004 19:27:16 -0000, H Carvey <keydet89 () yahoo com> wrote:
In-Reply-To: <200411261640.23084.dflists () iinet net au>


What could be up with the remote machine that stops nmap IDing the OS it is

running?


Well, the info at NetCraft could have been spoofed, or old.  The system using that IP could have at one time been 
running the OS/web server identified, but perhaps no longer.  And without knowing more about what arguments you used 
for nmap, and the actual output, it might be difficult to tell you why nmap couldn't figure it out...there are 
several possibilities there.

Harlan

"Windows Forensics and Incident Recovery"

http://www.windows-ir.com




-- 
Thanks,

Jimi


Current thread: