23:37:51 ~ # nmap -sS -sV -P0 -O -p 11523 lamusique.homelinux.org -d -n -vv --packet_trace Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-11-11 00:03 CET --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 1000, min 100, max 10000 scan-delay: TCP 1000, UDP 1000 parallelism: min 0, max 0 max-retries: 10, host-timeout: 0 --------------------------------------------- Initiating SYN Stealth Scan against 81.251.121.11 [1 port] at 00:03 Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and (src host 81.251.121.11))) SENT (0.3130s) TCP 192.168.1.101:60899 > 81.251.121.11:11523 S ttl=56 id=24936 iplen=44 seq=4229506305 win=1024 RCVD (0.4070s) TCP 81.251.121.11:11523 > 192.168.1.101:60899 SA ttl=115 id=0 iplen=44 seq=2681766592 win=16184 ack=4229506306 Discovered open port 11523/tcp on 81.251.121.11 The SYN Stealth Scan took 0.10s to scan 1 total ports. Initiating service scan against 1 service on 81.251.121.11 at 00:03 NSOCK (0.5930s) TCP connection requested to 81.251.121.11:11523 (IOD #1) EID 8 NSOCK (0.5930s) nsock_loop() started (no timeout). 1 events pending NSOCK (0.6760s) Callback: CONNECT SUCCESS for EID 8 [81.251.121.11:11523] NSOCK (0.6760s) Read request from IOD #1 [81.251.121.11:11523] (timeout: 6000ms) EID 18 NSOCK (0.7680s) Callback: READ SUCCESS for EID 18 [81.251.121.11:11523] (20 bytes): SSH-2.0-OpenSSH_4.5. The service scan took 0.18s to scan 1 service on 1 host. Starting RPC scan against 81.251.121.11 Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and src host 81.251.121.11)) For OSScan assuming port 11523 is open, 42488 is closed, and neither are firewalled SENT (0.7750s) TCP 192.168.1.101:60906 > 81.251.121.11:11523 SE ttl=39 id=34110 iplen=60 seq=2602599542 win=4096 SENT (0.7750s) TCP 192.168.1.101:60907 > 81.251.121.11:11523 ttl=51 id=21154 iplen=60 seq=2602599542 win=4096 SENT (0.7750s) TCP 192.168.1.101:60908 > 81.251.121.11:11523 SFPU ttl=37 id=54506 iplen=60 seq=2602599542 win=2048 SENT (0.7760s) TCP 192.168.1.101:60909 > 81.251.121.11:11523 A ttl=38 id=64106 iplen=60 seq=2602599542 win=3072 ack=0 SENT (0.7760s) TCP 192.168.1.101:60910 > 81.251.121.11:42488 S ttl=40 id=27809 iplen=60 seq=2602599542 win=1024 SENT (0.7760s) TCP 192.168.1.101:60911 > 81.251.121.11:42488 A ttl=47 id=61532 iplen=60 seq=2602599542 win=4096 ack=0 SENT (0.7760s) TCP 192.168.1.101:60912 > 81.251.121.11:42488 FPU ttl=42 id=53536 iplen=60 seq=2602599542 win=3072 SENT (0.7770s) UDP 192.168.1.101:60899 > 81.251.121.11:42488 ttl=51 id=41195 iplen=328 RCVD (0.8500s) TCP 81.251.121.11:11523 > 192.168.1.101:41473 A ttl=115 id=19463 iplen=40 seq=2682369767 win=16184 ack=2186634444 RCVD (0.8510s) TCP 81.251.121.11:11523 > 192.168.1.101:41473 FA ttl=115 id=19464 iplen=40 seq=2682369767 win=16184 ack=2186634444 SENT (3.2070s) TCP 192.168.1.101:60906 > 81.251.121.11:11523 SE ttl=51 id=21981 iplen=60 seq=2602599542 win=4096 SENT (3.2070s) TCP 192.168.1.101:60907 > 81.251.121.11:11523 ttl=53 id=58964 iplen=60 seq=2602599542 win=2048 SENT (3.2070s) TCP 192.168.1.101:60908 > 81.251.121.11:11523 SFPU ttl=51 id=10560 iplen=60 seq=2602599542 win=4096 SENT (3.2070s) TCP 192.168.1.101:60909 > 81.251.121.11:11523 A ttl=57 id=46067 iplen=60 seq=2602599542 win=2048 ack=0 SENT (3.2070s) TCP 192.168.1.101:60910 > 81.251.121.11:42488 S ttl=54 id=9997 iplen=60 seq=2602599542 win=3072 SENT (3.2070s) TCP 192.168.1.101:60911 > 81.251.121.11:42488 A ttl=59 id=22276 iplen=60 seq=2602599542 win=4096 ack=0 SENT (3.2070s) TCP 192.168.1.101:60912 > 81.251.121.11:42488 FPU ttl=50 id=1754 iplen=60 seq=2602599542 win=3072 SENT (3.2080s) UDP 192.168.1.101:60899 > 81.251.121.11:42488 ttl=51 id=41195 iplen=328 SENT (5.5620s) TCP 192.168.1.101:60900 > 81.251.121.11:11523 S ttl=48 id=60781 iplen=60 seq=2602599543 win=1024 RCVD (5.6430s) TCP 81.251.121.11:11523 > 192.168.1.101:60900 SA ttl=115 id=0 iplen=44 seq=2700142875 win=16184 ack=2602599544 SENT (5.6750s) TCP 192.168.1.101:60901 > 81.251.121.11:11523 S ttl=39 id=4328 iplen=60 seq=2602599544 win=4096 RCVD (5.7550s) TCP 81.251.121.11:11523 > 192.168.1.101:60901 SA ttl=115 id=0 iplen=44 seq=2684943274 win=16184 ack=2602599545 SENT (5.7860s) TCP 192.168.1.101:60902 > 81.251.121.11:11523 S ttl=46 id=37905 iplen=60 seq=2602599545 win=3072 RCVD (5.8670s) TCP 81.251.121.11:11523 > 192.168.1.101:60902 SA ttl=115 id=0 iplen=44 seq=2698186966 win=16184 ack=2602599546 SENT (5.8970s) TCP 192.168.1.101:60903 > 81.251.121.11:11523 S ttl=43 id=33933 iplen=60 seq=2602599546 win=4096 RCVD (5.9780s) TCP 81.251.121.11:11523 > 192.168.1.101:60903 SA ttl=115 id=0 iplen=44 seq=2697131917 win=16184 ack=2602599547 SENT (6.0060s) TCP 192.168.1.101:60904 > 81.251.121.11:11523 S ttl=44 id=45971 iplen=60 seq=2602599547 win=1024 RCVD (6.0890s) TCP 81.251.121.11:11523 > 192.168.1.101:60904 SA ttl=115 id=0 iplen=44 seq=2699295779 win=16184 ack=2602599548 SENT (6.1170s) TCP 192.168.1.101:60905 > 81.251.121.11:11523 S ttl=46 id=51759 iplen=60 seq=2602599548 win=3072 RCVD (6.1990s) TCP 81.251.121.11:11523 > 192.168.1.101:60905 SA ttl=115 id=0 iplen=44 seq=2696615247 win=16184 ack=2602599549 Host 81.251.121.11 appears to be up ... good. Interesting ports on 81.251.121.11: PORT STATE SERVICE VERSION 11523/tcp open ssh OpenSSH 4.5 (protocol 2.0) Device type: web proxy|firewall|general purpose|broadband router Running: Blue Coat SGOS, Checkpoint Windows NT/2K/XP, IPCop Linux 2.4.X, Linux 1.X|2.4.X|2.6.X, OpenBSD 3.X, Sun Solaris 2.X|7, ZyXel ZyNOS OS details: BlueCoat SG4, Checkpoint SecurePlatform NG FP3, IPCop 1.4 - 1.4.6 Linux 2.4.2x-based firewall, Linux 1.3.20 (x86), Linux 2.4.20, Linux 2.4.20 - 2.4.22, Linux 2.6.10 - 2.6.11, OpenBSD 3.6 x86 with pf "scrub in all", Sun Solaris 2.5, 2.5.1, Sun Solaris 2.6 - 7 x86, ZyXel 944S Prestige router OS Fingerprint: TSeq(Class=RI%gcd=1%SI=5C7182%IPID=Z%TS=U) T1(Resp=N) T2(Resp=N) T3(Resp=N) T4(Resp=N) T5(Resp=N) T6(Resp=N) T7(Resp=N) PU(Resp=N) TCP Sequence Prediction: Class=random positive increments Difficulty=6058370 (Good luck!) IPID Sequence Generation: All zeros Final times for host: srtt: 94126 rttvar: 94126 to: 470630 Nmap finished: 1 IP address (1 host up) scanned in 6.261 seconds Raw packets sent: 23 (1900B) | Rcvd: 9 (388B)