Nmap Announce mailing list archives

Re: Some more fingerprints


From: Nickolai Zeldovich <kolya () zepa net>
Date: Thu, 17 Dec 1998 01:25:04 -0500 (EST)


On Wed, 16 Dec 1998, Jan B. Koum  wrote:

On Thu, Dec 17, 1998 at 12:52:01AM -0500, Nickolai Zeldovich <kolya () zepa net> wrote:
Surprisingly, there isn't a matching fingerprint in nmap-os-fingerprints
for FreeBSD 2.2.6 (with all up-to-date patches) yet:

TSeq(Class=RI%gcd=3%SI=40F3)
TSeq(Class=RI%gcd=1%SI=DBA9)
TSeq(Class=RI%gcd=1%SI=D289)
T1(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T2(Resp=N)
T3(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T4(Resp=Y%DF=N%W=4000%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=Y%TOS=0%IPLEN=38%RIPTL=148%RIPCK=F%UCK=0%ULEN=134%DAT=E)

      All up-to-date patches will actually make it -STABLE and not 2.2.6-RELEASE.
      What does uname say?

FreeBSD hostname 2.2.6-RELEASE FreeBSD 2.2.6-RELEASE #0: Tue Oct 13
18:58:55 EDT 1998 kolya@hostname:/usr/src/sys/compile/HOSTNAME i386

Looks the same way on a number of different machines, except for the date.

Not sure about the -STABLE vs -RELEASE distinction; all I ment by "with
all up-to-date patches" is that I got the patches from ftp.freebsd.org,
fed them to 'patch' and re-compiled, in essence.

-- [ Nickolai Zeldovich // nickolai () zepa net ]



Current thread: