# nmap -p 50000 -vvv -O -A MYIP
Starting Nmap 4.53 ( http://insecure.org ) at 2008-02-08 13:40 UTC
Initiating Ping Scan at 13:40
...
Initiating SYN Stealth Scan at 13:40
Discovered open port 50000/tcp on MYIP
...
SCRIPT ENGINE: Initiating script scanning.
Initiating SCRIPT ENGINE at 13:40
Completed SCRIPT ENGINE at 13:40, 0.03s elapsed
Host MYHOST (MYIP) appears to be up ... good.
Interesting ports on MYHOST (MYIP):
PORT STATE SERVICE VERSION
50000/tcp open ssh (protocol 2.0)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port65001-TCP:V=4.53%I=7%D=2/8%Time=47AC5BB7%P=i686-pc-linux-gnu%r(NULL
SF:,23,"SSH-2\.0-OpenSSH_3\.8\.1p1\x20Solaris\x2010\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|enterprise|scanner
Running (JUST GUESSING) : Apple Mac OS X 10.5.X (89%), FreeBSD 6.X (88%), PC-BSD (86%), HP embedded (85%)
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0b4, x86) (89%), FreeBSD 6.0-STABLE - 6.2-RELEASE (88%), FreeBSD 6.2-RELEASE (x86) (88%), FreeBSD 6.2-STABLE - 6.3-PRERELEASE (88%), FreeBSD 6.2-RELEASE (87%), FreeBSD 6.2-RELEASE-p3 (87%), PC-BSD 1.3 (86%), Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0, PowerPC) (86%), Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0, x86) (86%), Apple Mac OS X 10.5 (Leopard) (Darwin 9.0.0b5 - 9.1.0) (85%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint by osscan system #2:
SCAN(V=4.53%D=2/8%OT=65001%CT=%CU=%PV=N%G=N%TM=47AC5BD9%P=i686-pc-linux-gnu)
SEQ(SP=107%GCD=1%ISR=107%TI=RD%II=RI%TS=A)
SEQ(SP=108%GCD=1%ISR=10C%TI=RD%II=RI%TS=A)
OPS(O1=M5B4NW1NNT11SLL%O2=M5B4NW1NNT11SLL%O3=M5B4NW1NNT11%O4=M5B4NW1NNT11SLL%O5=M5B4NW1NNT11SLL%O6=M5B4NNT11SLL)
WIN(W1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FFFF)
ECN(R=Y%DF=N%TG=40%W=FFFF%O=M5B4NW1SLL%CC=N%Q=)
T1(R=Y%DF=N%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=Y%DFI=S%TG=40%TOSI=S%CD=S%SI=S%DLI=S)
Uptime: 0.110 days (since Fri Feb 8 11:02:17 2008)
TCP Sequence Prediction: Difficulty=264 (Good luck!)
IP ID Sequence Generation: Randomized
Nmap done: 1 IP address (1 host up) scanned in 41.582 seconds
Raw packets sent: 89 (7508B) | Rcvd: 2365 (149.774KB)