OS Identification (Plugin 11936)

Ray Van Dolson <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
Hi all, per this blog:

  http://blog.tenablesecurity.com/nessus/page/3/ (search down the page
    for 11936)

The listed plugins are used to determine the identify of the OS on the
target host.  I don't see output of telnet listed there -- would this
be ignored as a factor in determining the OS?  In other words:

$ telnet hostname
Trying 10.27.52.76...
Connected to hostname.
Escape character is '^]'.
Red Hat Enterprise Linux Server release 5.2 (Tikanga)
Kernel 2.6.18-92.1.6.el5 on an x86_64
login: 
telnet> quit

It seems that this could be used with a high degree of confidence in
determining that this machine is a RHEL 5.2 machine :)  Instead, with
the above host and 11936 enabled, I get only a 30% chance that the
machine is running the "Linux kernel".

Anyone know on the telnet thing?

Thanks,
Ray
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.