Nmap Development mailing list archives

IPv4 OS Fingerprint Integration Highlights


From: Daniel Miller <bonsaiviking () gmail com>
Date: Fri, 29 May 2015 07:18:45 -0500

It's been a while since we had one of these! This covers all the changes
since the 6.47 release, and brings your submissions current through
mid-February.

Line count went from 85180 to 90388 (+5208, +6%).
Fingerprint count went from 4485 to 4766 (+281, +6%).

New vendor/family combinations:
Actiontec Linux, Apple Apple TV, C-Nav embedded, Cisco Android, Dell
VxWorks, Digium Linux, Espressif embedded, Essentia embedded, Fortinet
FortiOS, General Dynamics embedded, HP Linux, Harris embedded, High-Flying
embedded, Joyent SmartOS, Juniper JunOS, Kemp Linux, Leica embedded,
Microsoft Xbox 360, Milight embedded, MitraStar Linux, Motorola Linux,
NSFOCUS embedded, Netgem embedded, Omron embedded, Palo Alto embedded,
ProVision Linux, Smart Electronic embedded, TP-LINK embedded, Telco Systems
embedded, Zerto embedded, eCos eCos.
Removed vendor/family combinations:
TP-Link embedded.

You'll notice that we standardized on the TP-LINK capitalization for that
hardware manufacturer. This is now consistent between the service detection
and OS detection databases. Some more highlights:

Fingerprint Apple Mac OS X 10.7.0 (Lion) - 10.10 (Yosemite) or iOS 4.1 -
8.1.2 (Darwin 10.0.0 - 14.0.0)
  It remains difficult to distinguish between Darwin versions, which makes
for fingerprints like this one that cover a huge range of OS X and iOS
versions. However, we do have 4 new fingerprints that *only* match Yosemite
(OS X 10.10), so it looks like there may have been a detectable change in
some cases.

Android 5.0.1
FreeBSD 10.1
Linux 3.18
Windows 8.1
Windows Server 2008
Windows 10 Tech Preview
OpenBSD 5.6
NetBSD 7.0_BETA
   New fingerprints for various updated OSs.

Microsoft Windows for Workgroups 3.11
2.11BSD
4.1C BSD
DEC RSX-11M-PLUS 4
  A blast (or 4) from the past! Yes, these systems do have functional
TCP/IP stacks.

Audio receiver: Bose Soundtouch 20, Bowers & Wilkins Zeppelin Air, Denon
AVR-1900-series, Marantz NR1602, or Pioneer VSX-921
  We're running out of room for all the possible rebrandings of this
device. If anyone knows a canonical name for it or the original
manufacturer, please let us know.

Espressif WiFi system-on-a-chip
High-Flying HF-LPT100 embedded WLAN module
Leica T camera
Philips Hue Bridge (lwIP stack)
Schneider Electric ION8600 smart meter
  Nmap has the Internet of Things (IoT) covered.

In addition to these, we had the usual litany of switches, printers, home
routers, DVRs, IPMI on-board controllers, telco equipment, PLCs, and other
stuff you'd expect (or not!) to find on the Internet.

Dan
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: