# nmap -vv -sV -O -P0 200.114.7.3 -oX xpeed.xml
Starting Nmap 4.20 ( http://insecure.org ) at 2007-12-21 02:32 ART
Initiating Parallel DNS resolution of 1 host. at 02:32
Completed Parallel DNS resolution of 1 host. at 02:32, 0.62s elapsed
Initiating SYN Stealth Scan at 02:32
Scanning 200.114.7.3 [1697 ports]
Discovered open port 80/tcp on 200.114.7.3
SYN Stealth Scan Timing: About 26.49% done; ETC: 02:34 (0:01:23 remaining)
Completed SYN Stealth Scan at 02:33, 60.36s elapsed (1697 total ports)
Initiating Service scan at 02:33
Scanning 1 service on 200.114.7.3
Completed Service scan at 02:35, 115.25s elapsed (1 service on 1 host)
Warning: OS detection for 200.114.7.3 will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Initiating OS detection (try #1) against 200.114.7.3
Retrying OS detection (try #2) against 200.114.7.3
Initiating gen1 OS Detection against 200.114.7.3 at 205.921s
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
For OSScan assuming port 80 is open, 34871 is closed, and neither are firewalled
For OSScan assuming port 80 is open, 39920 is closed, and neither are firewalled
For OSScan assuming port 80 is open, 30776 is closed, and neither are firewalled
Host 200.114.7.3 appears to be up ... good.
Interesting ports on 200.114.7.3:
Not shown: 1696 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Device type: general purpose|fileserver|web proxy
Running (JUST GUESSING) : Microsoft Windows 2003/.NET|NT/2K/XP (90%), NetApp Data ONTAP (90%), NetApp embedded (90%), IBM AIX 4.X (88%), OpenBSD 3.X (87%)
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Microsoft Windows 2003 Server or XP SP2 (90%), NetApp Filer (Data OnTap 6.5.2) or NetCache (NetApp 5.6 - 6.0.1) (90%), IBM AIX 4.3.2.0-4.3.3.0 on an IBM RS/* (88%), Microsoft Windows 2003 Server (88%), Microsoft Windows XP Home Edition (English) SP2 (88%), OpenBSD 3.6 x86 with pf "scrub in all" (87%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint by osscan system #1:
SCAN(V=4.20%D=12/21%OT=80%CT=%CU=%PV=N%G=N%TM=476B50D1%P=x86_64-pc-linux-gnu)
TSeq(Class=TR%IPID=BI%TS=100HZ)
T1(Resp=Y%DF=Y%W=2017%ACK=S++%Flags=AS%Ops=MNWNNT)
T2(Resp=N)
T3(Resp=N)
T4(Resp=N)
T5(Resp=N)
T6(Resp=N)
T7(Resp=N)
PU(Resp=N)
Uptime: 230.678 days (since Fri May 4 10:20:25 2007)
TCP Sequence Prediction: Difficulty=9999999 (Good luck!)
IPID Sequence Generation: Broken little-endian incremental
OS and Service detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
Nmap finished: 1 IP address (1 host up) scanned in 241.021 seconds
Raw packets sent: 3550 (163.544KB) | Rcvd: 106 (7675B)