RE: Queso vs. nmap

[Markus Döhr <doehrm () aubi de>]

> I followed snapshots for a year or so then he seemed to have stopped
> development.  Nmap employs more tests and seems to have 
> exploded into use
> just after the last build of queso.

you're right...

btw here's a new (?) fingerprint

Sinix - former Reliant Unix
TSeq(Class=64K)
T1(Resp=Y%DF=N%W=7FFF%ACK=S++%Flags=AS%Ops=M)
T2(Resp=N)
T3(Resp=Y%DF=N%W=7FFF%ACK=O%Flags=A%Ops=)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=0%UCK=E%ULEN=134%DAT=E)


--
Markus Doehr                     
IT Admin                        
AUBI Baubeschläge GmbH          
Tel.: +49 6503 917 152          
Fax: +49 6503 917 119          
e-Mail: doehrm () aubi de
MD1139-RIPE  
*************************       


> -----Original Message-----
> From: Max Vision [mailto:vision () whitehats com]
> Sent: Saturday, January 09, 1999 6:24 AM
> To: Markus Döhr
> Cc: nmap-hackers () insecure org
> Subject: Re: Queso vs. nmap
>
>
> I thought I read Fyodor make reference to queso somewhere, 
> maybe in the
> more recent phrack article..
>
> On Sat, 9 Jan 1999, [iso-8859-1] Markus Döhr wrote:
> > I wonder if anyone knows the tool 'queso' from
> >
> > http://www.apostols.org/projectz/queso/
> >
> > which does quite a good job in OS detection.
> >
> > Just a question...
> >
> > --
> > Markus Doehr                     
> > IT Admin                        
> > AUBI Baubeschläge GmbH          
> > Tel.: +49 6503 917 152          
> > Fax : +49 6503 917 119          
> > e-Mail: doehrm () aubi de
> > MD1139-RIPE  
> > *************************