Nmap Announce mailing list archives
Strange Novell 4.1 and NCSA telnet
From: Peter 'g00bER' Kosinar <goober () gjh sk>
Date: Fri, 8 Jan 1999 11:49:12 +0100 (CET)
Hi NMappers ! Well, I have another fingerprint for you, I've sent it here already, but as I see, it wasn't included in nmap-os-fingerprints, probably because Fyodor thought it was just a mistake in the data. However I tried it again and again and I still found this fingerprint: FingerPrint Novell 4.10 (strange) TSeq(Class=TD%gcd=10%SI=1) T1(DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME) T2(Resp=N) T3(Resp=Y%DF=Y%W=2000%ACK=S++%Flags=AS%Ops=ME) T4(Resp=N) T5(DF=Y%W=0%ACK=S++%Flags=AR%Ops=) T6(DF=Y%W=0%ACK=O%Flags=R%Ops=) T7(DF=Y%W=0%ACK=S++%Flags=AR%Ops=) PU(DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E) All other Novell servers I know about were identified without any problems by NMap 2.02, but this one is an exception. Maybe you'd want to check it so here's the address: dunaj.gjh.sk = 194.1.171.190 And another thing about NCSA telnet (dos) -> when you try scanning it, it slows down _very_ much and sometimes it even hangs :). And of course all the services (ftp and rsh) it offered are dead forever (or till the end of the program). Peter =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Name: Peter Kosinar Work:) student and 'co-admin' of school Novell and Linux server E-Mail: the_goober () mindless com (preferred) goober () ganga gjh sk URL: http://www.gjh.schools.sk/~goober (under reconstruction now) Interests: crypto, [anti]virus, bugs
Current thread:
- Strange Novell 4.1 and NCSA telnet Peter 'g00bER' Kosinar (Jan 08)