All pastes #245397 Raw Edit

Sans nom

public text v1 · immutable
#245397 ·published 2006-11-10 23:05 UTC
rendered paste body
23:37:51 ~ # nmap -sS -sV -P0 -O -p 11523 lamusique.homelinux.org -d -n -vv --packet_trace

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-11-11 00:03 CET
--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 1000, min 100, max 10000
  scan-delay: TCP 1000, UDP 1000
  parallelism: min 0, max 0
  max-retries: 10, host-timeout: 0
---------------------------------------------
Initiating SYN Stealth Scan against 81.251.121.11 [1 port] at 00:03
Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and (src host 81.251.121.11)))
SENT (0.3130s) TCP 192.168.1.101:60899 > 81.251.121.11:11523 S ttl=56 id=24936 iplen=44 seq=4229506305 win=1024
RCVD (0.4070s) TCP 81.251.121.11:11523 > 192.168.1.101:60899 SA ttl=115 id=0 iplen=44 seq=2681766592 win=16184 ack=4229506306
Discovered open port 11523/tcp on 81.251.121.11
The SYN Stealth Scan took 0.10s to scan 1 total ports.
Initiating service scan against 1 service on 81.251.121.11 at 00:03
NSOCK (0.5930s) TCP connection requested to 81.251.121.11:11523 (IOD #1) EID 8
NSOCK (0.5930s) nsock_loop() started (no timeout). 1 events pending
NSOCK (0.6760s) Callback: CONNECT SUCCESS for EID 8 [81.251.121.11:11523]
NSOCK (0.6760s) Read request from IOD #1 [81.251.121.11:11523] (timeout: 6000ms) EID 18
NSOCK (0.7680s) Callback: READ SUCCESS for EID 18 [81.251.121.11:11523] (20 bytes): SSH-2.0-OpenSSH_4.5.
The service scan took 0.18s to scan 1 service on 1 host.
Starting RPC scan against 81.251.121.11
Warning:  OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and src host 81.251.121.11))
For OSScan assuming port 11523 is open, 42488 is closed, and neither are firewalled
SENT (0.7750s) TCP 192.168.1.101:60906 > 81.251.121.11:11523 SE ttl=39 id=34110 iplen=60 seq=2602599542 win=4096
SENT (0.7750s) TCP 192.168.1.101:60907 > 81.251.121.11:11523  ttl=51 id=21154 iplen=60 seq=2602599542 win=4096
SENT (0.7750s) TCP 192.168.1.101:60908 > 81.251.121.11:11523 SFPU ttl=37 id=54506 iplen=60 seq=2602599542 win=2048
SENT (0.7760s) TCP 192.168.1.101:60909 > 81.251.121.11:11523 A ttl=38 id=64106 iplen=60 seq=2602599542 win=3072 ack=0
SENT (0.7760s) TCP 192.168.1.101:60910 > 81.251.121.11:42488 S ttl=40 id=27809 iplen=60 seq=2602599542 win=1024
SENT (0.7760s) TCP 192.168.1.101:60911 > 81.251.121.11:42488 A ttl=47 id=61532 iplen=60 seq=2602599542 win=4096 ack=0
SENT (0.7760s) TCP 192.168.1.101:60912 > 81.251.121.11:42488 FPU ttl=42 id=53536 iplen=60 seq=2602599542 win=3072
SENT (0.7770s) UDP 192.168.1.101:60899 > 81.251.121.11:42488 ttl=51 id=41195 iplen=328
RCVD (0.8500s) TCP 81.251.121.11:11523 > 192.168.1.101:41473 A ttl=115 id=19463 iplen=40 seq=2682369767 win=16184 ack=2186634444
RCVD (0.8510s) TCP 81.251.121.11:11523 > 192.168.1.101:41473 FA ttl=115 id=19464 iplen=40 seq=2682369767 win=16184 ack=2186634444
SENT (3.2070s) TCP 192.168.1.101:60906 > 81.251.121.11:11523 SE ttl=51 id=21981 iplen=60 seq=2602599542 win=4096
SENT (3.2070s) TCP 192.168.1.101:60907 > 81.251.121.11:11523  ttl=53 id=58964 iplen=60 seq=2602599542 win=2048
SENT (3.2070s) TCP 192.168.1.101:60908 > 81.251.121.11:11523 SFPU ttl=51 id=10560 iplen=60 seq=2602599542 win=4096
SENT (3.2070s) TCP 192.168.1.101:60909 > 81.251.121.11:11523 A ttl=57 id=46067 iplen=60 seq=2602599542 win=2048 ack=0
SENT (3.2070s) TCP 192.168.1.101:60910 > 81.251.121.11:42488 S ttl=54 id=9997 iplen=60 seq=2602599542 win=3072
SENT (3.2070s) TCP 192.168.1.101:60911 > 81.251.121.11:42488 A ttl=59 id=22276 iplen=60 seq=2602599542 win=4096 ack=0
SENT (3.2070s) TCP 192.168.1.101:60912 > 81.251.121.11:42488 FPU ttl=50 id=1754 iplen=60 seq=2602599542 win=3072
SENT (3.2080s) UDP 192.168.1.101:60899 > 81.251.121.11:42488 ttl=51 id=41195 iplen=328
SENT (5.5620s) TCP 192.168.1.101:60900 > 81.251.121.11:11523 S ttl=48 id=60781 iplen=60 seq=2602599543 win=1024
RCVD (5.6430s) TCP 81.251.121.11:11523 > 192.168.1.101:60900 SA ttl=115 id=0 iplen=44 seq=2700142875 win=16184 ack=2602599544
SENT (5.6750s) TCP 192.168.1.101:60901 > 81.251.121.11:11523 S ttl=39 id=4328 iplen=60 seq=2602599544 win=4096
RCVD (5.7550s) TCP 81.251.121.11:11523 > 192.168.1.101:60901 SA ttl=115 id=0 iplen=44 seq=2684943274 win=16184 ack=2602599545
SENT (5.7860s) TCP 192.168.1.101:60902 > 81.251.121.11:11523 S ttl=46 id=37905 iplen=60 seq=2602599545 win=3072
RCVD (5.8670s) TCP 81.251.121.11:11523 > 192.168.1.101:60902 SA ttl=115 id=0 iplen=44 seq=2698186966 win=16184 ack=2602599546
SENT (5.8970s) TCP 192.168.1.101:60903 > 81.251.121.11:11523 S ttl=43 id=33933 iplen=60 seq=2602599546 win=4096
RCVD (5.9780s) TCP 81.251.121.11:11523 > 192.168.1.101:60903 SA ttl=115 id=0 iplen=44 seq=2697131917 win=16184 ack=2602599547
SENT (6.0060s) TCP 192.168.1.101:60904 > 81.251.121.11:11523 S ttl=44 id=45971 iplen=60 seq=2602599547 win=1024
RCVD (6.0890s) TCP 81.251.121.11:11523 > 192.168.1.101:60904 SA ttl=115 id=0 iplen=44 seq=2699295779 win=16184 ack=2602599548
SENT (6.1170s) TCP 192.168.1.101:60905 > 81.251.121.11:11523 S ttl=46 id=51759 iplen=60 seq=2602599548 win=3072
RCVD (6.1990s) TCP 81.251.121.11:11523 > 192.168.1.101:60905 SA ttl=115 id=0 iplen=44 seq=2696615247 win=16184 ack=2602599549
Host 81.251.121.11 appears to be up ... good.
Interesting ports on 81.251.121.11:
PORT      STATE SERVICE VERSION
11523/tcp open  ssh     OpenSSH 4.5 (protocol 2.0)
Device type: web proxy|firewall|general purpose|broadband router
Running: Blue Coat SGOS, Checkpoint Windows NT/2K/XP, IPCop Linux 2.4.X, Linux 1.X|2.4.X|2.6.X, OpenBSD 3.X, Sun Solaris 2.X|7, ZyXel ZyNOS
OS details: BlueCoat SG4, Checkpoint SecurePlatform NG FP3, IPCop 1.4 - 1.4.6 Linux 2.4.2x-based firewall, Linux 1.3.20 (x86), Linux 2.4.20, Linux 2.4.20 - 2.4.22, Linux 2.6.10 - 2.6.11, OpenBSD 3.6 x86 with pf "scrub in all", Sun Solaris 2.5, 2.5.1, Sun Solaris 2.6 - 7 x86, ZyXel 944S Prestige router
OS Fingerprint:
TSeq(Class=RI%gcd=1%SI=5C7182%IPID=Z%TS=U)
T1(Resp=N)
T2(Resp=N)
T3(Resp=N)
T4(Resp=N)
T5(Resp=N)
T6(Resp=N)
T7(Resp=N)
PU(Resp=N)

TCP Sequence Prediction: Class=random positive increments
                         Difficulty=6058370 (Good luck!)
IPID Sequence Generation: All zeros
Final times for host: srtt: 94126 rttvar: 94126  to: 470630

Nmap finished: 1 IP address (1 host up) scanned in 6.261 seconds
               Raw packets sent: 23 (1900B) | Rcvd: 9 (388B)