Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 May 2001 10:46:28 +1200
From:      "Juha Saarinen" <juha@saarinen.org>
To:        "Stephen Montgomery-Smith" <stephen@math.missouri.edu>
Cc:        "Lauri Laupmaa" <mauri@inspiral.net>, <stable@FreeBSD.ORG>
Subject:   RE: ISN number prediction ?
Message-ID:  <KPECIILENDDLPCNIMLOFGEKCCDAA.juha@saarinen.org>
In-Reply-To: <3AF4821F.20BC4366@math.missouri.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
:: I that was what it was, but it doesn't seem to be working now.
:: Maybe it needs to know what the OS is in order to figure this out.
:: When I run nmap I get
::
:: No exact OS matches for host .........
::
:: suggesting that nmap cannot figure out any more that it is FreeBSD
:: (probably because of the new TCP software in the kernel).

Same here (against a 4.2-STABLE box):

TCP Sequence Prediction: Class=random positive increments
                         Difficulty=38177 (Worthy challenge)
No OS matches for host (If you know what OS is running on it, see
http://www.insecure.org/cgi-bin/nmap-submit.cgi).
TCP/IP fingerprint:
TSeq(Class=RI%gcd=1%SI=7E12)
TSeq(Class=RI%gcd=1%SI=3CF6)
TSeq(Class=RI%gcd=1%SI=9521)
T1(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T2(Resp=N)
T3(Resp=Y%DF=Y%W=403D%ACK=S++%Flags=AS%Ops=MNWNNT)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=0%ULEN=134%DAT=E)

(NMAP 2.53)

-- Juha


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?KPECIILENDDLPCNIMLOFGEKCCDAA.juha>