Nmap Development: Re: services on 64 bit machines

[doug () hcsw org]

Hi,

It is very uncommon that service detection will be able to discover
this information. However, if it is a UNIX box running the time
service, you may get lucky:

match time m|^[\xca-\xce]...$|s i/32 bits/
match time m|^[\xca-\xce]....\0\0\0$|s i/64 bits/

There are also a few other oddballs:

match ftp m|^220 ([-\w_.]+) FTP Server \(Oracle XML DB/Oracle9i Enterprise Edition Release ([\d.]+) - 64bit 
Production\) ready\.\r\n| p/Oracle XML DB ftpd/ h/$1/ v/$2/ i/64 bits/

Best,

Doug


On Mon, Apr 21, 2008 at 05:47:29AM +0000 or thereabouts, swapna prasad wrote:
> Hi All,
>  
>        I need to find out if the machines is a 64 bit or 32 bit? Is it possible to ascertain if the machine is 64 bit 
> or 32 bit based on response from service probes. I know SNMP response has the information of architecture. Is there a 
> list of service which does have information of architecture in its response or Is there different set of service 
> probes for services running on 64 bit machines. If you have any information in this regard please let me know.
>  
> TIA
> S
> _________________________________________________________________
> More immediate than e-mail? Get instant access with Windows Live Messenger.
> http://www.windowslive.com/messenger/overview.html?ocid=TXT_TAGLM_WL_Refresh_instantaccess_042008
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org