Nmap Announce mailing list archives

Novell 4.10, Linux 2.0.30, NCSA telnet


From: Peter 'g00bER' Kosinar <goober () gjh sk>
Date: Fri, 18 Dec 1998 12:42:46 +0100 (CET)

Hi NMappers !

Here are some reports of misidentified systems/systems not identified at all.

-- Real system = Linux 2.0.30
   My home, not connected to internet, scanned as addr. 127.0.0.1
   12 times the same report
Remote operating system guess: Linux 2.0.28  
OS Fingerprint:
TSeq(Class=TR)
T1(Resp=Y%DF=N%W=3C00%ACK=S++%Flags=BAS%Ops=ME)
T2(Resp=N)
T3(Resp=Y%DF=N%W=3C00%ACK=S++%Flags=ASF%Ops=ME)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=C0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)

-- Real 'system' NCSA Telnet 2.2
   Not a real system, but containts ftp-client and is used at our MsDos
   machines to connect to the linux server.

TSeq(Class=C%Val=E065000)
T1(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T2(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T3(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=N)

-- Our Novell Netware 4.10 server
   dunaj.gjh.sk
        You can (try to) scan it yourself, but I warn you, our link is very
        slow, especially during the day (GMT+1, 7:30AM-6:00PM)

No OS matches for this host.  TCP fingerprints:
TSeq(Class=TD%gcd=10%SI=1)
T1(Resp=Y%DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME)
T2(Resp=N)
T3(Resp=Y%DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME)
T4(Resp=N)
T5(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)

                                                        g00bER

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Name:      Peter Kosinar
Work:)    student and 'co-admin' of school Novell and Linux server
E-Mail:    the_goober () mindless com   (preferred)
           goober () ganga gjh sk
URL:       http://www.gjh.schools.sk/~goober  (under reconstruction now)
Interests: crypto, [anti]virus, bugs



Current thread: