Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Hackers: Re: Linux 2.0.36 detected as 2.0.35

Re: Linux 2.0.36 detected as 2.0.35

From: Mario Camou <mcamou_at_workmail.com>
Date: Wed, 16 Dec 1998 14:39:05 -0600

Red Hat 5.1, but I got the kernel off of ftp.kernel.org and compiled/installed it
myself.

-Mario.

Lucid Dream wrote:

> You're not, perchance, running redhat linux are you? Redhat released kind
> of a premature kernel for 2.0.36 with RH 5.2. They later corrected this
> (updates.redhat.com).
>
> -----------------
> Lucid Dream
> www.unixgeeks.org
>
> On Wed, 16 Dec 1998, Mario Camou wrote:
>
> > Hi,
> >
> > Just to say, Linux running kernel 2.0.36 is erroneously detected as 2.0.35,
> > here's the fingerprint for 2.0.36:
> >
> > Remote operating system guess: Linux 2.0.35
> > OS Fingerprint:
> > T1(Resp=Y%DF=N%W=7FE0%ACK=S++%Flags=AS%Ops=ME)
> > T2(Resp=N)
> > T3(Resp=Y%DF=N%W=7FE0%ACK=S++%Flags=ASF%Ops=ME)
> > T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
> > T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
> > T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
> > T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
> > PU(Resp=Y%DF=N%TOS=C0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)
> >
> > Here's the fingerprint for a 2.0.35 box:
> >
> > Remote operating system guess: Linux 2.0.35
> > OS Fingerprint:
> > TSeq(Class=TR)
> > T1(Resp=Y%DF=N%W=7FE0%ACK=S++%Flags=AS%Ops=ME)
> > T2(Resp=N)
> > T3(Resp=Y%DF=N%W=7FE0%ACK=S++%Flags=ASF%Ops=ME)
> > T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
> > T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
> > T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
> > T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
> > PU(Resp=Y%DF=N%TOS=C0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)
> >
> > They look the same! What to do then?
> >
> > -Mario.
> >
Received on Dec 16 1998

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos