Nmap 4.20ALPHA5: Unable to produce ideal -O2 tests ?

[Brandon Enright <bmenrigh () ucsd edu>]

First, thanks a bunch for this release, I can hardly wait to play with
it.

I've been trying to generate O2 fingerprints but I haven't been able to
for one reason or another.  One of my Linux routers produced an ideal
fingerprint but the other machines I've tested will not.  Below is more
information that should be useful.

A machine that is 12/13 hops away from me produces this error:

"OS fingerprint not ideal because: Host more than fifteen network hops
away"

However just a few lines farther down Nmap says:

"Network Distance: 12 hops"

A iputils tracepath to this machine ends with the following line:

"13: target.host.tld (w.x.y.z) asymm 10 48.163ms reached"


The others machines I've tested (localhost, other machines 1 or 2 hops
away) all produce this output:

"OS fingerprint not ideal because: maxTimingRatio is greater than 1.4"

I have tried all the different timing levels and played with manual
timings to no avail.

Here is the timing information (thanks Doug!) for one of the scans that
failed (used -T4):

--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 500, min 100, max 1250
  scan-delay: TCP 10, UDP 1000
  parallelism: min 0, max 0
  max-retries: 6, host-timeout: 0
---------------------------------------------

Final times for host: srtt: 2228 rttvar: 388  to: 100000


Thanks for any input and thanks again for this release!

Brandon

-- 
Brandon Enright
Network Security Analyst
UCSD ACS/Network Operations
bmenrigh () ucsd edu



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org