Nmap Development mailing list archives

Re: fingerprintable Cisco IOS versions


From: David Fifield <david () bamsoftware com>
Date: Fri, 9 Nov 2012 09:03:07 -0800

On Fri, Nov 09, 2012 at 11:29:12AM +0800, Raymond Lo wrote:
My target Cisco switch is in version 12.2.18-SXF8 (image name
:s72033-ipservicesk9-vz.122-18.SXF8.bin), which is much newer than version
10.3.

However, it can't be fingerprinted by nmap. Any idea ?

Yes, whenever Nmap gives you a fignerprint, you should submit it at
        http://insecure.org/cgi-bin/submit.cgi?new-os
If Nmap is not giving you a fingerprint, it means there is a problem
with the network conditions such that the fingerprint isn't of good
quality. (Look for a line saying "Fingerprint not ideal because...".) In
that case an OS classification isn't possible in general.

Finally, make sure you are using the --osscan-guess option if you want
to see the closest matches.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: