mailing list archives
Re: nmap: OS hints from service versions
From: "Luis MartinGarcia." <luis.mgarc () gmail com>
Date: Mon, 09 May 2011 10:22:44 +0200
On 05/08/2011 09:47 PM, Toni Ruottu wrote:
The OS detection is trying to detect the OS of the host. The services
might all be running on different operating systems because of
virtualization and port forwarding.
If that was the case, Nmap would have trouble detecting the remote OS,
because the OS detection probe replies that Nmap uses to distinguish
between one OS or the other, would have been produced by different
systems, and therefore, have different signatures.
I guess the OS detection engine does not accept hints because it
operates at the network and transport layers, not at the application
layer, and mixing everything up, would result in a complicated and messy
detection engine. However, this is just my opinion, Fyodor and David may
have a different one.
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/