Nmap Announce mailing list archives

fingerprints for HPUX A.09.X


From: Igor Schein <igor () txc com>
Date: Tue, 5 Jan 1999 14:21:01 -0500

with nmap 2.02

TSeq(Class=64K)
T1(Resp=Y%DF=N%W=2000%ACK=S++%Flags=AS%Ops=M)
T2(Resp=N)
T3(Resp=Y%DF=N%W=2000%ACK=O%Flags=A%Ops=)
T4(Resp=Y%DF=N%W=2000%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=Y%TOS=0%IPLEN=38%RIPTL=148%RIPCK=0%UCK=E%ULEN=134%DAT=E)

The above slightly differs from the corresponding entry for HPUX in 
the nmap-os-fingerprints file included in the current distribution.

BTW, nmap -O crashes HPUX's inetd with about 50% probability.  In
those cases where the crash does occur, nmap display the following:

WARNING:  RST from port 13 -- is this port really open?
Insufficient responses for TCP sequencing (0), OS detection will be
MUCH less reliable

So the crash problem is intermittent.

Igor



Current thread: