Nmap Announce mailing list archives

Strange Novell 4.1 and NCSA telnet


From: Peter 'g00bER' Kosinar <goober () gjh sk>
Date: Fri, 8 Jan 1999 11:49:12 +0100 (CET)

Hi NMappers !

Well, I have another fingerprint for you, I've sent it here already, but
as I see, it wasn't included in nmap-os-fingerprints, probably because
Fyodor thought it was just a mistake in the data. However I tried it again
and again and I still found this fingerprint:

FingerPrint Novell 4.10 (strange)
TSeq(Class=TD%gcd=10%SI=1)
T1(DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME)
T2(Resp=N)
T3(Resp=Y%DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME)
T4(Resp=N)
T5(DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
T6(DF=Y%W=0%ACK=O%Flags=R%Ops=)
T7(DF=Y%W=0%ACK=S++%Flags=AR%Ops=)
PU(DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)

All other Novell servers I know about were identified without any problems
by NMap 2.02, but this one is an exception. Maybe you'd want to check it
so here's the address:
dunaj.gjh.sk  =  194.1.171.190

And another thing about NCSA telnet (dos) -> when you try scanning it,
it slows down _very_ much and sometimes it even hangs :). And of course
all the services (ftp and rsh) it offered are dead forever (or till the
end of the program).

                                                        Peter

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Name:      Peter Kosinar
Work:)    student and 'co-admin' of school Novell and Linux server
E-Mail:    the_goober () mindless com   (preferred)
           goober () ganga gjh sk
URL:       http://www.gjh.schools.sk/~goober  (under reconstruction now)
Interests: crypto, [anti]virus, bugs



Current thread: