Re: NMAP Discrepancies

[Ron <ron () skullsecurity net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 23 May 2011 08:22:58 -0500 Michael Lubinski <michael.lubinski () gmail com> wrote:
> Anybody know why NMAP reports differences every so often with the
> same port. E.g.
>
> -3389/tcp  open  microsoft-rdp Microsoft Terminal Service
> +3389/tcp  open
>
> The same scan is run every time, sometimes it displays the service
> (using the -sV switch) and sometimes not?  

Cross-posting to Nmap-dev. 

My suspicion is that the service itself doesn't always return a banner properly. 

Ron

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk3mw0UACgkQ2t2zxlt4g/QDZACeIB3gL2826Ecc8YWLh3rQgmF5
BxoAn3ub5t0QvfVmkF3mFPX8PlK1mdTH
=9P+i
-----END PGP SIGNATURE-----
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com