Nmap Hackers: Re: HPUX fingerprint

From: Jesse Brown <bextreme_at_pobox.com>
Date: Wed, 16 Dec 1998 12:27:16 -0800 (PST)

Does anyone want the TCP fingerprint on a few routers? I have run across a
few that are not listed, but which I know the OS version, type, etc.

-J

On Tue, 15 Dec 1998, Jonathan Scott Duff wrote:

> Here's a TCP fingerprint for HPUX 9.05. What's the official way to
> get this added?
>
> TSeq(Class=64K)
> T1(Resp=Y%DF=N%W=2000%ACK=S++%Flags=AS%Ops=M)
> T2(Resp=N)
> T3(Resp=Y%DF=N%W=2000%ACK=O%Flags=A%Ops=)
> T4(Resp=Y%DF=N%W=2000%ACK=O%Flags=R%Ops=)
> T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
> T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
> T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
> PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=0%UCK=E%ULEN=134%DAT=E)
>
> -Scott
> --
> Jonathan Scott Duff
> duff_at_cbi.tamucc.edu
>
Received on Dec 16 1998