Nmap Hackers: Re: netcraft os-detection

From: Bryan Blackburn <blb_at_pobox.com>
Date: Thu, 25 Feb 1999 15:16:28 -0700

Since netcraft state they examine the website response, I'd say it's the
Server line from www.apple.com that makes it look like it could be
Solaris,

$ telnet www.apple.com 80
Trying 17.254.0.91...
Connected to www.apple.com.
Escape character is '^]'.
GET / HTTP/1.0

HTTP/1.1 200 OK
Server: Netscape-Enterprise/3.6
Date: Thu, 25 Feb 1999 21:59:20 GMT
Content-type: text/html
Connection: close
[...]

Bryan

Juergen Schmidt wrote:
>
> Hello,
>
> does anybody know, how netcraft is doing their os-detection? They report
> Solaris for www.apple.com while nmap detects MacOS 7.5.5 - 8.0 -- what
> seems more realistic :-)
>
> bye, ju
>
> --
> Juergen Schmidt Redakteur/editor c't magazin
> Verlag Heinz Heise GmbH & Co KG, Helstorferstr. 7, D-30625 Hannover
> EMail: ju_at_ct.heise.de - Tel.: +49 511 5352 300 - FAX: +49 511 5352 417
Received on Feb 25 1999