Skorpinok Rover Posted May 10, 2012 Share Posted May 10, 2012 Hello, When i run nmap O.S detection scan for windows xp within Pentest lab, i get this ' Too many fingerprints match this host to give specific OS details , i tried this in vmware workstation before it gave me same mesage , however the mac address seems right, i run backtrack 5r2/windows xp sp3 on virtual box. my network configuration: NAT & HOST ONLY for Windows XP & Backtrack 5R2.please suggest me how to solve this ? Thanks in advance. scan details: nmap -O 192.168.56.103 Starting Nmap 5.61TEST4 ( http://nmap.org ) at 2012-05-05 23:33 GST Nmap scan report for 192.168.56.103 Host is up (0.00042s latency). All 1000 scanned ports on 192.168.56.103 are filtered MAC Address: 08:00:27:C9:67:41 (Cadmus Computer Systems) Too many fingerprints match this host to give specific OS details Network Distance: 1 hop Regards.. Quote Link to comment Share on other sites More sharing options...
Mr-Protocol Posted May 10, 2012 Share Posted May 10, 2012 All 1000 scanned ports on 192.168.56.103 are filtered Try turning off it's firewall and scanning again. Or try using a different type of scan as well like -sN or -sA Quote Link to comment Share on other sites More sharing options...
hexophrenic Posted May 11, 2012 Share Posted May 11, 2012 Yeah, what he (Mr-Protocol) said. If there are not ports responding to network traffic, nmap cannot effectively fingerprint the OS. One of its fingerprinting methods relies on the response codes from certain packets to determine what OS it is as well as information about protocols, versions, etc.. But if it cannot get responses, it cannot guess the OS. Quote Link to comment Share on other sites More sharing options...
arcane Posted May 26, 2012 Share Posted May 26, 2012 You could also try: nmap -A 192.168.56.103 Sometimes it will hint what OS it is under service info. I think it queries mdns to get information unlike a regular OS scan which requires ports to be open in order for it to work. If there is no information on the service info line, it is probably Windows. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.