Netstat ------- Active Connections Proto Local Address Foreign Address State TCP mesa:epmap mesa:0 LISTENING TCP mesa:microsoft-ds mesa:0 LISTENING TCP mesa:1025 mesa:0 LISTENING TCP mesa:1029 mesa:0 LISTENING TCP mesa:1801 mesa:0 LISTENING TCP mesa:2103 mesa:0 LISTENING TCP mesa:2105 mesa:0 LISTENING TCP mesa:2107 mesa:0 LISTENING TCP mesa:3389 mesa:0 LISTENING TCP mesa:1030 mesa:0 LISTENING TCP mesa:1038 mesa:27015 ESTABLISHED TCP mesa:4671 mesa:4672 ESTABLISHED TCP mesa:4672 mesa:4671 ESTABLISHED TCP mesa:5180 mesa:0 LISTENING TCP mesa:27015 mesa:0 LISTENING TCP mesa:27015 mesa:1038 ESTABLISHED TCP mesa:netbios-ssn mesa:0 LISTENING TCP mesa:1270 oam-d21a.blue.aol.com:5190 ESTABLISHED TCP mesa:3192 64.12.28.86:5190 ESTABLISHED TCP mesa:4716 apache2-emu.scotch.dreamhost.com:http TIME_WAIT *** No web (port 80) or email (port 25) ports available Stealth SYN Scan (scanme) ------------------------- Starting Nmap 4.20 ( http://insecure.org ) at 2007-11-28 22:34 Eastern Standard Time Initiating Parallel DNS resolution of 1 host. at 22:34 Completed Parallel DNS resolution of 1 host. at 22:35, 16.50s elapsed Initiating SYN Stealth Scan at 22:35 Scanning 205.217.153.62 [1697 ports] Discovered open port 53/tcp on 205.217.153.62 Discovered open port 22/tcp on 205.217.153.62 Discovered open port 80/tcp on 205.217.153.62 SYN Stealth Scan Timing: About 36.15% done; ETC: 22:36 (0:00:53 remaining) Completed SYN Stealth Scan at 22:35, 50.02s elapsed (1697 total ports) Host 205.217.153.62 appears to be up ... good. Interesting ports on 205.217.153.62: Not shown: 1691 filtered ports PORT STATE SERVICE 22/tcp open ssh 25/tcp closed smtp 53/tcp open domain 70/tcp closed gopher 80/tcp open http 113/tcp closed auth Nmap finished: 1 IP address (1 host up) scanned in 67.000 seconds Raw packets sent: 3399 (149.536KB) | Rcvd: 16 (736B) OS for scanme.nmap.org ---------------------- OS scan results: Novell NetWare 5.1 SP8 or 6.5 SP3 Service scan results: PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 4.3 (protocol 2.0) 25/tcp closed smtp 53/tcp open domain 70/tcp closed gopher 80/tcp open http Apache httpd 2.2.2 ((Fedora)) 113/tcp closed auth The discrepency is that the OS scan says Novell Netware is the OS and the service scan says Fedora (linux dist) is the OS. If the OS scan cannot be trusted, than Fedora is the OS. Stealth SYN Scan (celtic) ------------------------- Starting Nmap 4.20 ( http://insecure.org ) at 2007-11-28 22:49 Eastern Standard Time Initiating Parallel DNS resolution of 1 host. at 22:49 Completed Parallel DNS resolution of 1 host. at 22:49, 16.50s elapsed Initiating SYN Stealth Scan at 22:49 Scanning 130.85.88.109 [1697 ports] Discovered open port 22/tcp on 130.85.88.109 Discovered open port 80/tcp on 130.85.88.109 Discovered open port 548/tcp on 130.85.88.109 Completed SYN Stealth Scan at 22:50, 23.83s elapsed (1697 total ports) Host 130.85.88.109 appears to be up ... good. Interesting ports on 130.85.88.109: Not shown: 1694 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 548/tcp open afpovertcp Nmap finished: 1 IP address (1 host up) scanned in 40.859 seconds Raw packets sent: 3397 (149.448KB) | Rcvd: 8 (368B) OS for celtic.ifsm.umbc.edu --------------------------- Port 445 scan results: state=filtered, service=microsoft-ds This is a service used by microsoft for file sharing and Active Directory related activities OS scan results: Too many fingerprints match this host to give specific OS details Service scan results: PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 1.99) 80/tcp open http Apache httpd 1.3.33 ((Darwin) tomcat/1.0 DAV/1.0.3 PHP/4.3.10) 548/tcp open afp Apple AFP (name: celtic; protocol 3.1; Mac OS X 10.2.*;) The OS scan could not determine the OS and the service scan says Mac OS is the OS.