Nmap Development mailing list archives

OS integration highlights


From: David Fifield <david () bamsoftware com>
Date: Thu, 27 Jun 2013 13:37:31 -0700

I recently finished a round of 1,300 OS fingerprint submissions
since January 2013. Here is a summary of how the database changed.

Line count went from 76523 to 78267 (+1744, +2%).
Fingerprint count went from 4027 to 4118 (+91, +2%).

New vendor/family combinations:
DEC DECserver, Lantronix Linux, Meinberg Linux, NTT embedded, Oracle
Solaris, RIM BlackBerry, Sandstrom embedded, Tenda VxWorks, Vocality
embedded, WebSense Linux.

The increase in size is less than it has been in previous rounds. I'm
becoming more aggressive in combining fingerprints for different
configurations of Linux especially. For whatever reason, the vast
majority of submissions are redundant Linux submissions.

Interesting new fingerprints:

Fingerprint Linux 3.7 - 3.9
        It appears to be possible to distinguish Linux 3.7 from earlier
        versions. There is a new quite large MSS of FFD7 in some cases,
        and a distinctive window size of AAAA.
        OPS(O1=MFFD7ST11NW7%O2=MFFD7ST11NW7%O3=MFFD7NNT11NW7%O4=MFFD7ST11NW7%O5=MFFD7ST11NW7%O6=MFFD7ST11)
        WIN(W1=AAAA%W2=AAAA%W3=AAAA%W4=AAAA%W5=AAAA%W6=AAAA)

Fingerprint IBM AIX 7.1

Plus AIX 7.1, OpenBSD 5.3, iOS 6.1.

David Fifield
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: