mirror of
https://github.com/nmap/nmap.git
synced 2025-12-08 21:51:28 +00:00
starting to make major updates to nmap-os-db, various fixes to the related tools
This commit is contained in:
fyodor
313
nmap-os-db
313
nmap-os-db
@@ -23,6 +23,159 @@
|
||||
# For a complete description of Nmap OS detection and the format of
|
||||
# fingerprints in this file, see http://insecure.org/nmap/osdetect/
|
||||
|
||||
Fingerprint Avaya G700 Telephony Media Gateway
|
||||
Class Avaya | embedded || VoIP gateway
|
||||
SEQ(SP=18-1C%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=9D-A2%TI=I%II=I%SS=S%TS=1|2)
|
||||
OPS(O1=M200NW0NNT11%O2=M200NW0NNT11%O3=M200NW0NNT11%O4=M200NW0NNT11%O5=M200NW0NNT11%O6=M200NNT11)
|
||||
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
|
||||
ECN(R=Y%DF=N%T=40%TG=40%W=2000%O=M200NW0%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=N%T=40%TG=40%W=2000%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=40%TG=40%W=2000%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Avaya P130 workgroup switch, SW version 2.11.3
|
||||
Fingerprint Avaya P130 workgroup switch
|
||||
Class Avaya | embedded || switch
|
||||
SEQ(R=N)
|
||||
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
|
||||
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
|
||||
ECN(R=Y%DF=N%T=40%TG=40%W=0%O=%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=40%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
|
||||
T2(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Fingerprint Avaya Inc. - P330 Stackable Switch, SW version 4.1.6
|
||||
Fingerprint Avaya P330 Stackable Switch
|
||||
Class Avaya | embedded || switch
|
||||
SEQ(SP=F-11%GCD=FA00|1F400|2EE00|3E800|4E200|5DC00%ISR=9B-9D%TI=I%II=I%SS=S%TS=U)
|
||||
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
|
||||
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
|
||||
ECN(R=Y%DF=N%T=1E%TG=1E%W=1000%O=%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=1E%TG=1E%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=N%T=1E%TG=1E%W=1000%S=O%A=O%F=A%O=%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=1E%TG=1E%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=1E%TG=1E%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=1E%TG=1E%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=1E%TG=1E%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=0%IPL=38%UN=0%RIPL=G%RID=1042%RIPCK=Z%RUCK=0%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# IOS (tm) C820 Software (C820-K9OSV6Y6-M), Version 12.3(20), RELEASE SOFTWARE (fc2)
|
||||
Fingerprint Cisco 820-series router running IOS 12.3(20)
|
||||
Class Cisco | IOS | 12.X | router
|
||||
SEQ(SP=E2-107%GCD=<7%ISR=108-10C%TI=Z%II=RI%TS=U)
|
||||
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
|
||||
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
|
||||
ECN(R=Y%DF=N%T=100%TG=100%W=1020%O=M5B4%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=100%TG=100%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=N%T=100%TG=100%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=N)
|
||||
T4(R=Y%DF=N%T=100%TG=100%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=100%TG=100%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=100%TG=100%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=100%TG=100%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=100%TG=100%TOS=C0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=100%TG=100%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Cisco Systems Catalyst 1900,V9.00.03, 19XX's runs neither IOS nor CatOS
|
||||
Fingerprint Cisco Catalyst 1900 Switch, Software v9.00.03
|
||||
Class Cisco | embedded || switch
|
||||
SEQ(SP=F2-F6%GCD=<7%ISR=106-108%TI=I|RD%II=I%SS=S%TS=U)
|
||||
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
|
||||
WIN(W1=400%W2=400%W3=400%W4=400%W5=400%W6=400)
|
||||
ECN(R=Y%DF=N%T=FF%TG=FF%W=400%O=M218%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T5(R=Y%DF=N%T=FF%TG=FF%W=0%S=O%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=N)
|
||||
T7(R=N)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Cisco WS-C4506, Cisco Catalyst Operating System Software, Version 8.1(1)
|
||||
Fingerprint Cisco Catalyst WS-C4506 Switch, CatOS 8.1(1)
|
||||
Class Cisco | CatOS || switch
|
||||
SEQ(SP=EB-FC%GCD=<7%ISR=109-10E%TI=I%II=I%SS=S%TS=U)
|
||||
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
|
||||
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
|
||||
ECN(R=Y%DF=N%T=FF%TG=FF%W=1000%O=M5B4%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=N%T=FF%TG=FF%W=1000%S=O%A=S+%F=AS%O=M5B4%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=FF%TG=FF%W=1000%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=FF%TG=FF%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=Z%RUCK=0%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JA2, RELEASE SOFTWARE (fc1) / Cisco Aironet 350
|
||||
Fingerprint Cisco Aironet 350 WAP Running IOS 12.3(8)JA2
|
||||
Class Aironet | IOS | 12.X | WAP
|
||||
SEQ(SP=DF-F9%GCD=<7%ISR=107-10C%TI=Z%II=RI%TS=U)
|
||||
OPS(O1=M5B4%O2=M578%O3=M280%O4=M218%O5=M218%O6=M109)
|
||||
WIN(W1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)
|
||||
ECN(R=Y%DF=N%T=FF%TG=FF%W=1020%O=M5B4%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=FF%TG=FF%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=N)
|
||||
T4(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=FF%TG=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=C0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# D-Link DI-824VUP Wireless VPN Router Firmware Version: v1.05, Mon, Apr 25 2005
|
||||
Fingerprint D-Link DI-824VUP Wireless VPN Router
|
||||
Class D-Link | embedded || WAP
|
||||
SEQ(SP=F-11%GCD=32|64|96|C8|FA|12C%ISR=4F-51%TI=I%II=%TS=U)
|
||||
OPS(O1=M5B4%O2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)
|
||||
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
|
||||
ECN(R=Y%DF=N%T=40%TG=40%W=16D0%O=M5B4%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=40%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=40%TG=40%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(R=N)
|
||||
|
||||
# Livebox Inventel v5.05.5-fr ADSL firmware A2pBT009.d16m-1
|
||||
# Livebox home ADSL router (wifi enabled). Manufactured by Inventel.
|
||||
Fingerprint Inventel Livebox wireless broadband router
|
||||
Class Inventel | embedded || WAP
|
||||
SEQ(SP=C9-CB%GCD=<7%ISR=D3-D4%TI=Z%II=I%TS=8)
|
||||
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
|
||||
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=FF%TG=FF%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=FF%TG=FF%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Firmware Version 4.30.7, Linux 2.4.20 I believe
|
||||
Fingerprint Linksys WRT54GL WAP (Linux kernel)
|
||||
Class Class Linksys | Linux | 2.4.X | WAP
|
||||
@@ -40,6 +193,40 @@ T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linksys WRT54GS Firmware Version: v3.37.1, Oct. 18, 2004
|
||||
Fingerprint Linksys WRT54GS WAP (Linux kernel)
|
||||
Class Linksys | Linux | 2.4.X | WAP
|
||||
SEQ(SP=C6-C8%GCD=<7%ISR=C7-C9%TI=Z%II=I%TS=7)
|
||||
OPS(O1=M5B4ST11NW0%O2=M5B4ST11NW0%O3=M5B4NNT11NW0%O4=M5B4ST11NW0%O5=M5B4ST11NW0%O6=M5B4ST11)
|
||||
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW0%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=D0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=10%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linksys WRT54GSv4 running OpenWrt Linux kernel 2.4.30
|
||||
Fingerprint Linksys WRT54GS v4 running OpenWrt w/Linux kernel 2.4.30
|
||||
Class Linksys | embedded || broadband router
|
||||
SEQ(SP=C5-C7%GCD=<7%ISR=CC-CE%TI=Z%II=I%TS=U)
|
||||
OPS(O1=M5B4NNSNW0%O2=M5B4NNSNW0%O3=M5B4NW0%O4=M5B4NNSNW0%O5=M5B4NNSNW0%O6=M5B4NNS)
|
||||
WIN(W1=16D0%W2=16D0%W3=16D0%W4=16D0%W5=16D0%W6=16D0)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=16D0%O=M5B4NNSNW0%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=16D0%S=O%A=O|S+%F=A|AS%O=M5B4NNSNW0%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linux 2.6.12-1.1380_FC3 #1 Wed Oct 19 20:34:13 EDT 2005 i686 i686 i386 GNU/Linux
|
||||
Fingerprint Linux 2.6.12-1.1380_FC3 (Fedora Core 3)
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
@@ -57,10 +244,10 @@ T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linux 2.6.16-1.2096_FC5 #1 SMP Wed Apr 19 05:14:26 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux
|
||||
Fingerprint Linux 2.6.16-1.2096_FC5 (Fedora Core 5)
|
||||
# Linux 2.6.12-12mdksmp #1 SMP 5 i686 Intel(R) Pentium(R) 4 CPU 3.20GHz Mandriva (custom kernel), laptop
|
||||
Fingerprint Linux 2.6.12-12mdksmp (Mandriva)
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
SEQ(SP=C0-CE%GCD=<7%ISR=C6-D2%TI=Z%II=I%TS=8)
|
||||
SEQ(SP=CA-CC%GCD=<7%ISR=D0-D2%TI=Z%II=I%TS=A)
|
||||
OPS(O1=M400CST11NW2%O2=M400CST11NW2%O3=M400CNNT11NW2%O4=M400CST11NW2%O5=M400CST11NW2%O6=M400CST11)
|
||||
WIN(W1=7FFF%W2=7FFF%W3=7FFF%W4=7FFF%W5=7FFF%W6=7FFF)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=7FFF%O=M400CNNSNW2%CC=N%Q=)
|
||||
@@ -74,6 +261,41 @@ T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linux 2.6.16-gentoo-r7 #4 Tue Jul 18 18:33:44 UTC 2006 x86_64 AMD Athlon(tm) 64 Processor 2800+ GNU/Linux
|
||||
# Linux 2.6.16-1.2096_FC5 #1 SMP Wed Apr 19 05:14:26 EDT 2006 x86_64 x86_64 x86_64 GNU/Linux
|
||||
Fingerprint Linux 2.6.16
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
SEQ(SP=C0-CE%GCD=<7%ISR=C6-D6%TI=Z%II=I%TS=8)
|
||||
OPS(O1=M400CST11NW2%O2=M400CST11NW2%O3=M400CNNT11NW2%O4=M400CST11NW2%O5=M400CST11NW2%O6=M400CST11)
|
||||
WIN(W1=7FFF%W2=7FFF%W3=7FFF%W4=7FFF%W5=7FFF%W6=7FFF)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=7FFF%O=M400CNNSNW2%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=7FFF%S=O%A=S+%F=AS%O=M400CST11NW2%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A|O%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=O|S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Fingerprint Linux 2.6.15-26-server #1 SMP Thu Aug 3 04:09:15 UTC 2006 i686 GNU/Linux <--> Ubuntu 6.06.01 LTS Server
|
||||
Fingerprint Linux 2.6.15-26 (Ubuntu 6.06.01)
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
SEQ(SP=C1-C3%GCD=<7%ISR=CB-CD%TI=Z%II=I%TS=7)
|
||||
OPS(O1=M5B4ST11NW2%O2=M5B4ST11NW2%O3=M5B4NNT11NW2%O4=M5B4ST11NW2%O5=M5B4ST11NW2%O6=M5B4ST11)
|
||||
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW2%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
Fingerprint Linux 2.6.16-2-686 Debian
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
SEQ(SP=B9-D1%GCD=<5%ISR=C0-D5%TI=Z%II=I%TS=8)
|
||||
@@ -155,6 +377,40 @@ T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Linux From Scratch - Linux 2.6.17.9 #1 PREEMPT Fri Aug 18 20:42:25 MST 2006 i686 i686 i386 GNU/Linux
|
||||
Fingerprint Linux 2.6.17.9 i686 (custom compiled)
|
||||
Class Linux | Linux | 2.6.X | general purpose
|
||||
SEQ(SP=BC-CD%GCD=<7%ISR=CD-CE%TI=Z%II=I%TS=8)
|
||||
OPS(O1=NNT11|M5B4ST11NW2%O2=NNT11|M5B4ST11NW2%O3=NNT11|M5B4NNT11NW2%O4=NNT11|M5B4ST11NW2%O5=NNT11|M5B4ST11NW2%O6=NNT11|M5B4ST11)
|
||||
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=16D0%O=M5B4NNSNW2%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=O|S+%F=A|AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=16A0%S=O%A=O|S+%F=A|AS%O=NNT11|M5B4ST11NW2%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=40%TG=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=40%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# OpenBSD 3.9-stable (GENERIC) #0: Tue Aug 29 06:52:40 CDT 2006 (i386)
|
||||
Fingerprint OpenBSD 3.9-stable (x86)
|
||||
Class OpenBSD | OpenBSD | 3.X | general purpose
|
||||
SEQ(SP=CB-10C%GCD=<7%ISR=FA-100%TI=RD%II=RI%TS=21|22)
|
||||
OPS(O1=M5B4NNSNW0NNT11%O2=M5B4NNSNW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NNSNW0NNT11%O5=M5B4NNSNW0NNT11%O6=M5B4NNSNNT11)
|
||||
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
|
||||
ECN(R=Y%DF=Y%T=40%TG=40%W=4000%O=M5B4NNSNW0%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=40%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=Y%DF=Y%T=40%TG=40%W=4000%S=O%A=S+%F=AS%O=M5B4NNSNW0NNT11%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=40%TG=40%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=FF%TG=FF%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Taken on an X86 SMP machine
|
||||
Fingerprint Microsoft Windows 2000 SP4
|
||||
Class Microsoft | Windows | 2000 | general purpose
|
||||
@@ -172,6 +428,23 @@ T7(R=Y%DF=N%T=80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=80%TG=80%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=80%TG=80%TOSI=Z%CD=Z%SI=S%DLI=S)
|
||||
|
||||
# Vista Beta 2 Build 5472
|
||||
Fingerprint Microsoft Windows Vista Beta 2 (Build 5472)
|
||||
Class Microsoft | Windows Vista || general purpose
|
||||
SEQ(SP=D2-D7%GCD=<7%ISR=107-109%TI=I%II=I%SS=S%TS=7)
|
||||
OPS(O1=M5B4NW8ST11%O2=M5B4NW8ST11%O3=M5B4NW8NNT11%O4=M5B4NW8ST11%O5=M5B4NW8ST11%O6=M5B4ST11)
|
||||
WIN(W1=2000%W2=2000%W3=2000%W4=2000%W5=2000%W6=2000)
|
||||
ECN(R=Y%DF=Y%T=80%TG=80%W=2000%O=M5B4NW8NNS%CC=N%Q=)
|
||||
T1(R=Y%DF=Y%T=80%TG=80%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=Y%T=80%TG=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=Y%DF=Y%T=80%TG=80%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%T=80%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=Y%T=80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=Y%T=80%TG=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=Y%T=80%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=80%TG=80%TOS=0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=80%TG=80%TOSI=Z%CD=Z%SI=S%DLI=S)
|
||||
|
||||
# Windows XP Professional SP2: Version 5.1 (2600.xpsp_sp2_rtm.040803-2158 : Service Pack 2. firewall disabled)
|
||||
Fingerprint Microsoft Windows XP SP2 (firewall disabled)
|
||||
Class Microsoft | Windows | NT/2K/XP | general purpose
|
||||
@@ -222,3 +495,37 @@ T6(R=Y%DF=Y%T=40%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=N)
|
||||
U1(DF=Y%T=FF%TG=FF%TOS=0%IPL=70%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=Y%T=FF%TG=FF%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Tektronix Phaser 8200DP, firmware: OS 3.106 laser printer
|
||||
Fingerprint Tektronix Phaser 8200DP laser printer
|
||||
Class Tektronix | embedded || printer
|
||||
SEQ(R=N)
|
||||
OPS(O1=%O2=%O3=%O4=%O5=%O6=)
|
||||
WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)
|
||||
ECN(R=Y%DF=N%T=7F%TG=7F%W=0%O=%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=7F%TG=7F%S=Z%A=S+%F=AR%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=Y%DF=N%T=7F%TG=7F%W=0%S=Z%A=O%F=AR%O=%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=7F%TG=7F%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=7F%TG=7F%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=7F%TG=7F%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=7F%TG=7F%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=7F%TG=7F%TOS=0%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=N%T=7F%TG=7F%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
# Toshiba e-Studio20 printer, ROM Version 6.19 TA
|
||||
Fingerprint Toshiba e-Studio20 printer
|
||||
Class Toshiba | embedded || printer
|
||||
SEQ(R=N)
|
||||
OPS(O1=M218%O2=M218%O3=M218%O4=M218%O5=M218%O6=M218)
|
||||
WIN(W1=1000%W2=1000%W3=1000%W4=1000%W5=1000%W6=1000)
|
||||
ECN(R=Y%DF=N%T=3C%TG=3C%W=1000%O=M218%CC=N%Q=)
|
||||
T1(R=Y%DF=N%T=3C%TG=3C%S=Z%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=Y%DF=N%T=3C%TG=3C%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
T3(R=Y%DF=N%T=3C%TG=3C%W=1000%S=Z%A=S+%F=AS%O=M218%RD=0%Q=)
|
||||
T4(R=Y%DF=N%T=3C%TG=3C%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T5(R=Y%DF=N%T=3C%TG=3C%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=Y%DF=N%T=3C%TG=3C%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)
|
||||
T7(R=Y%DF=N%T=3C%TG=3C%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
|
||||
U1(DF=N%T=3C%TG=3C%TOS=0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
|
||||
IE(DFI=S%T=3C%TG=3C%TOSI=S%CD=S%SI=S%DLI=S)
|
||||
|
||||
11
osscan2.cc
11
osscan2.cc
@@ -1663,10 +1663,7 @@ void HostOsScan::makeTSeqFP(HostOsScanStats *hss) {
|
||||
avg_ts_hz += dhz / ( hss->si.responses - 1);
|
||||
}
|
||||
|
||||
/* if (o.debugging)
|
||||
printf("The avg TCP TS HZ of %s is: %f\n", hss->target->targetipstr(), avg_ts_hz); */
|
||||
|
||||
if (avg_ts_hz > 0 && avg_ts_hz < 3.9) { /* relatively wide range because sampling time so short and frequency so slow */
|
||||
if (avg_ts_hz > 0 && avg_ts_hz < 3.9) { /* relatively wide range because sampling time so short and frequency so slow */
|
||||
hss->si.ts_seqclass = TS_SEQ_2HZ;
|
||||
hss->si.lastboot = hss->seq_send_times[0].tv_sec - (hss->si.timestamps[0] / 2);
|
||||
}
|
||||
@@ -1678,10 +1675,10 @@ void HostOsScan::makeTSeqFP(HostOsScanStats *hss) {
|
||||
hss->si.ts_seqclass = TS_SEQ_1000HZ;
|
||||
hss->si.lastboot = hss->seq_send_times[0].tv_sec - (hss->si.timestamps[0] / 1000);
|
||||
}
|
||||
else if (avg_ts_hz > 0) {
|
||||
hss->si.ts_seqclass = TS_SEQ_OTHER_NUM;
|
||||
else if (avg_ts_hz > 0) {
|
||||
hss->si.ts_seqclass = TS_SEQ_OTHER_NUM;
|
||||
hss->si.lastboot = hss->seq_send_times[0].tv_sec - (hss->si.timestamps[0] / (unsigned int)(0.5 + avg_ts_hz));
|
||||
}
|
||||
}
|
||||
|
||||
if (hss->si.lastboot && (hss->seq_send_times[0].tv_sec - hss->si.lastboot > 63072000)) {
|
||||
/* Up 2 years? Perhaps, but they're probably lying. */
|
||||
|
||||
@@ -143,7 +143,7 @@ int main(int argc, char *argv[]) {
|
||||
if (!testFP) fatal("Sorry -- failed to parse the so-called fingerprint you entered");
|
||||
|
||||
if ((rc = remove_duplicate_tests(testFP))) {
|
||||
printf("[WARN] Adjusted fingerprint due to %d duplicated tests (we only look at the first).\n", rc);
|
||||
printf("[WARN] Adjusted fingerprint due to %d duplicated tests (we only look at the one with the most attributes).\n", rc);
|
||||
}
|
||||
|
||||
/* Now we find the matches! */
|
||||
|
||||
Reference in New Issue
Block a user