Penetration Testing: Fingerprinting Windows O/S based on ports open?

["Robert Masse" <rmasse () gosecure ca>]

Hi
 
Does anyone have a matrix of TCP/UDP ports open per default install of
Windows (OS focused, not application focused like having tcp 80 for
iis)?  I cannot use classic O/S fingerprinting with NMAP nor can I use
passive fingerprinting like P0f....
 
I need a simple table like:
 
Win95               Win98               NT4                  W2K
ME                   XP
 
TCP 133455      y                      n                      y
n                      n                      y
UDP 1234535    y                      n
TCP 1543637
TCP 4434565
 
Etc
 
Etc
 
Of course the example I used above is bogus but I am too lazy to type in
all the results.  I don't have access to 95, 98, ME etc so I cannot
verify myself.
 
Any help would be appreciated; I need a list of ports per O/S soon for a
personal project.
 
Once I have my information, I will post the results.
 
Thanks
 
Rob

---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_pen-test_031015
----------------------------------------------------------------------------