Nmap Announce mailing list archives

Cyberguard 4.0 fingerprints


From: Xavier Man <mrman () darkside org>
Date: Sat, 9 Jan 1999 01:44:30 -0600 (CST)


This is a Cyberguard 4.0 firewall, which is SCO based.

TSeq(Class=RI%gcd=1%SI=99325)
TSeq(Class=RI%gcd=1%SI=7B7DC)
TSeq(Class=RI%gcd=1%SI=7FEA0)
T1(Resp=Y%DF=N%W=1000%ACK=S++%Flags=AS%Ops=)
T2(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
T2(Resp=N)
T3(Resp=Y%DF=N%W=1000%ACK=O%Flags=A%Ops=)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T4(Resp=N)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=15C%RID=F%RIPCK=0%UCK=E%ULEN=134%DAT=E)

Mr. Man 
If at first you don't succeed, destroy all evidence that you tried.



Current thread: