Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: services on 64 bit machines
From: doug () hcsw org
Date: Mon, 21 Apr 2008 14:01:50 -0700

Hi,

It is very uncommon that service detection will be able to discover
this information. However, if it is a UNIX box running the time
service, you may get lucky:

match time m|^[\xca-\xce]...$|s i/32 bits/
match time m|^[\xca-\xce]....\0\0\0$|s i/64 bits/

There are also a few other oddballs:

match ftp m|^220 ([-\w_.]+) FTP Server \(Oracle XML DB/Oracle9i Enterprise Edition Release ([\d.]+) - 64bit 
Production\) ready\.\r\n| p/Oracle XML DB ftpd/ h/$1/ v/$2/ i/64 bits/

Best,

Doug


On Mon, Apr 21, 2008 at 05:47:29AM +0000 or thereabouts, swapna prasad wrote:

Hi All,
 
       I need to find out if the machines is a 64 bit or 32 bit? Is it possible to ascertain if the machine is 64 bit 
or 32 bit based on response from service probes. I know SNMP response has the information of architecture. Is there a 
list of service which does have information of architecture in its response or Is there different set of service 
probes for services running on 64 bit machines. If you have any information in this regard please let me know.
 
TIA
S
_________________________________________________________________
More immediate than e-mail? Get instant access with Windows Live Messenger.
http://www.windowslive.com/messenger/overview.html?ocid=TXT_TAGLM_WL_Refresh_instantaccess_042008

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

Attachment: signature.asc
Description: Digital signature


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]