Nmap Announce mailing list archives

Re: Mac OS X Signature (fwd)


From: Joe Battle <battlej () groove com>
Date: Thu, 11 May 2000 23:03:08 -0400



On Sun, May 07, 2000 at 11:39:45PM -0400, Andrew Brown wrote:
Seems MACs still loudly announce themselves on RSTs.

make a patch.  figure out which versions of macos respond in which
way.  advertise the patch on this list.  i did.  :)

I grok not wanting to put single-OS-specific code into NMAP, but there are
lots of Macs out there and lots of them have no ports open.

and lots of cisco routers.  i'm pretty sure catalysts don't respond
like the routers do.


that's not fair. a catalyst is a switch _and_ a router. the router runs
standard IOS. the router side should respond just like any other cisco. the 
switch software is a little different.

BTW in case anyone's interested...  (this assumes acl's let packets through)

using andrew's cisco-probe patch to nmap I collected the following foo:

cisco catalyst 2900, 2900xl, and 2900xlm all respond to cisco probe
cisco 3600 running 12.0(3) responds
cisco 3600 running 12.0(5) doesn't respond
the 7 or 8 2600's (various os releases) I hit all responded properly
most of the catalyst 5000 series routers I have access to are dropping packets.
  sorry, no info there yet...

Joe
battlej () groove com


Current thread: