Nmap Hackers: Netopia 655-U/POTS ISDN Router

From: Jordan Ritter <jpr5_at_darkridge.com>
Date: Tue, 29 Dec 1998 15:37:15 -0500 (EST)

is incorrectly identified as a Cisco Catalyst 1900 switch:

TCP Sequence Prediction: Class=trivial time dependency
Difficulty=0 (Trivial joke)

Sequence numbers: D78A2 D95EE DB33A DD086 DEDD2 E0B1E
Remote operating system guess: Cisco Catalyst 1900 switch
OS Fingerprint:
TSeq(Class=TD%gcd=1D4C%SI=0)
T1(Resp=Y%DF=N%W=400%ACK=S++%Flags=AS%Ops=M)
T2(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
T3(Resp=Y%DF=N%W=400%ACK=S++%Flags=AS%Ops=M)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)

Jordan Ritter
Network Security Engineer Systems Administrator
Ring-Zero, Netect, Inc. Boston, MA Darkridge Security Solutions
Received on Dec 29 1998