Re: services on 64 bit machines

Hi,

It is very uncommon that service detection will be able to discover
this information. However, if it is a UNIX box running the time
service, you may get lucky:

match time m|^[\xca-\xce]...$|s i/32 bits/
match time m|^[\xca-\xce]....\0\0\0$|s i/64 bits/

There are also a few other oddballs:

match ftp m|^220 ([-\w_.]+) FTP Server \(Oracle XML DB/Oracle9i Enterprise Edition Release ([\d.]+) - 64bit Production\) ready\.\r\n| p/Oracle XML DB ftpd/ h/$1/ v/$2/ i/64 bits/

Best,

Doug

On Mon, Apr 21, 2008 at 05:47:29AM +0000 or thereabouts, swapna prasad wrote:
>
> Hi All,
>
> I need to find out if the machines is a 64 bit or 32 bit? Is it possible to ascertain if the machine is 64 bit or 32 bit based on response from service probes. I know SNMP response has the information of architecture. Is there a list of service which does have information of architecture in its response or Is there different set of service probes for services running on 64 bit machines. If you have any information in this regard please let me know.
>
> TIA
> S
> _________________________________________________________________
> More immediate than e-mail? Get instant access with Windows Live Messenger.
> http://www.windowslive.com/messenger/overview.html?ocid=TXT_TAGLM_WL_Refresh_instantaccess_042008
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org