Re: When nmap can't ID the OS...

From: H Carvey (keydet89_at_yahoo.com)
Date: 11/27/04

  • Next message: David Gillett: "RE: deny access" 
    Date: 27 Nov 2004 19:27:16 -0000
To: security-basics@securityfocus.com
    ('binary' encoding is not supported, stored as-is) In-Reply-To: <200411261640.23084.dflists@iinet.net.au>

    >What could be up with the remote machine that stops nmap IDing the OS it is
    >running?

    Well, the info at NetCraft could have been spoofed, or old. The system using that IP could have at one time been running the OS/web server identified, but perhaps no longer. And without knowing more about what arguments you used for nmap, and the actual output, it might be difficult to tell you why nmap couldn't figure it out...there are several possibilities there.

    Harlan
    "Windows Forensics and Incident Recovery"
    http://www.windows-ir.com

  • Next message: David Gillett: "RE: deny access"