OSDetectionAnomalies

This is a very common network artifact, worth 75 points together. I have seen it with as few as three hops.

U1.TOS: "0" NOMATCH "C0" (50 points)
IE.TOSI: "Z" NOMATCH "S" (25 points)

TTL anomalies happen with larger distances. This is from a Linux host six hops away:

ECN.T: "3E" NOMATCH "40" (15 points)
T1.T: "3E" NOMATCH "40" (15 points)
T3.T: "3E" NOMATCH "40" (15 points)
T4.T: "3E" NOMATCH "40" (15 points)
T5.T: "3E" NOMATCH "40" (15 points)
T6.T: "3E" NOMATCH "40" (15 points)
T7.T: "3E" NOMATCH "40" (15 points)
U1.T: "3E" NOMATCH "40" (15 points)
IE.T: "3E" NOMATCH "40" (15 points)

Or from Windows 2003 five hops away:

ECN.T: "81" NOMATCH "80" (15 points)
T1.T: "81" NOMATCH "80" (15 points)
T2.T: "81" NOMATCH "80" (15 points)
T3.T: "81" NOMATCH "80" (15 points)
T4.T: "81" NOMATCH "80" (15 points)
T5.T: "81" NOMATCH "80" (15 points)
T6.T: "81" NOMATCH "80" (15 points)
T7.T: "81" NOMATCH "80" (15 points)
U1.T: "81" NOMATCH "80" (15 points)
IE.T: "81" NOMATCH "80" (15 points)

The phenomenon where DS=1 but there is no MAC address happens occasionally, I think too frequently for it to be caused just by scanning on non-Ethernet networks. I think it caused by an incorrect hop calculation. It often comes with network artifacts:

ECN.T: "3F" NOMATCH "40" (15 points)
T1.T: "3F" NOMATCH "40" (15 points)
T5.T: "3F" NOMATCH "40" (15 points)
U1.R: "Y" NOMATCH "N" (50 points)
IE.T: "100" NOMATCH "40" (15 points)
IE.TOSI: "S" NOMATCH "Z" (25 points)

MatchPoints

# $Id: nmap-os-db 10243 2008-09-17 22:32:13Z david $
MatchPoints
SEQ(SP=25%GCD=75%ISR=25%TI=100%II=100%SS=80%TS=100)
OPS(O1=20%O2=20%O3=20%O4=20%O5=20%O6=20)
WIN(W1=15%W2=15%W3=15%W4=15%W5=15%W6=15)
ECN(R=100%DF=20%T=15%TG=15%W=15%O=15%CC=100%Q=20)
T1(R=100%DF=20%T=15%TG=15%S=20%A=20%F=30%RD=20%Q=20)
T2(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T3(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T4(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T5(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T6(R=100%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
T7(R=80%DF=20%T=15%TG=15%W=25%S=20%A=20%F=30%O=10%RD=20%Q=20)
U1(R=50%DF=20%T=15%TG=15%TOS=50%IPL=100%UN=100%RIPL=100%RID=100%RIPCK=100%RUCK=100%RUL=100%RUD=100)
IE(R=50%DFI=40%T=15%TG=15%TOSI=25%CD=100%SI=100%DLI=100)

Candidate tests for deletion

IE.TOSI

$ grep TOSI= nmapsubmit-osfp-071608 | sed -e 's/.*\(TOSI=[^%]*\).*/\1/' | sort | uniq -c
      4 TOSI=
      1 TOSI=80
      1 TOSI=A0
    200 TOSI=S
     97 TOSI=Z

(The TOSI= are when it happened to be at the end of a line.) It changed to either Z or 20 in all six non-localhost known-host scans.

U1.TOS

Here are 19 U1.TOS misses out of 310 prints. ('U1.TOS', '0', 'C0', 50) means "U1.TOS: 0 NOMATCH C0 (50 points)".

    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', 'C0', '0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', 'A0', '0', 50)
    ('U1.TOS', 'A0', '0', 50)
    ('U1.TOS', '80', '0', 50)
    ('U1.TOS', '80', '0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)
    ('U1.TOS', '0', 'C0', 50)

Most of the misses are 0 mismatching C0. The others are something else mismatching 0.

Close analysis of known hosts

scanme

From scanme

SCAN(V=4.76%D=9/17%OT=22%CT=7%CU=7%PV=N%DS=0%G=Y%TM=48D18240%P=x86_64-unknown-linux-gnu)
SEQ(SP=BF%GCD=1%ISR=CA%TI=Z%II=I%TS=A)
OPS(O1=M400CST11NW7%O2=M400CST11NW7%O3=M400CNNT11NW7%O4=M400CST11NW7%O5=M400CST11NW7%O6=M400CST11)
WIN(W1=8000%W2=8000%W3=8000%W4=8000%W5=8000%W6=8000)
ECN(R=Y%DF=Y%T=40%W=8018%O=M400CNNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=40%W=8000%S=O%A=S+%F=AS%O=M400CST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=Y%DF=N%T=40%TOS=C0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
IE(R=Y%DFI=N%T=40%TOSI=S%CD=S%SI=S%DLI=S)

From Fyodor

SCAN(V=4.76%D=9/17%OT=22%CT=25%CU=%PV=N%G=Y%TM=48D17E5F%P=x86_64-unknown-linux-gnu)
SEQ(SP=C7%GCD=1%ISR=CD%TI=Z%II=I%TS=A)
OPS(O1=M5ACST11NW7%O2=M5ACST11NW7%O3=M5ACNNT11NW7%O4=M5ACST11NW7%O5=M5ACST11NW7%O6=M5ACST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5ACNNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5ACST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)

MSS changed from 400C to 5AC, W1–W6 changed from 8000 to 16A0, ECN.W changed from 8018 to 16D0, U1 not received, IE.TOSI changed from S to Z.

From me

SCAN(V=4.76%D=9/20%OT=22%CT=25%CU=%PV=N%G=Y%TM=48D56850%P=i686-pc-linux-gnu)
SEQ(SP=CB%GCD=1%ISR=CC%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)

Lost SEQ.II=I, MSS changed from 400C to 5B4, W1–W6 changed from 8000 to 16A0, ECN.W changed from 8018 to 16D0, T3,T4,T6,T7,U1 not received, TOSI changed from S to Z.

From goomba

SCAN(V=4.76%D=9/22%OT=22%CT=25%CU=%PV=N%G=Y%TM=48D8174F%P=x86_64-unknown-linux-gnu)
SEQ(SP=C9%GCD=1%ISR=CD%TI=Z%II=I%TS=A)
SEQ(SP=C9%GCD=2%ISR=CD%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=20%CD=S%SI=S%DLI=S)

SEQ.II=I lost in one instance, MSS changed from 400C to 5B4, W1–W6 changed from 8000 to 16A0, ECN.W changed from 8018 to 16D0, T3.O=NNT11 in one instance, T3.F=A in one instance, U1 not received, IE.TOSI changed from S to 20.

goomba

From goomba

SCAN(V=4.76%D=9/22%OT=22%CT=25%CU=%PV=N%G=Y%TM=48D8174F%P=x86_64-unknown-linux-gnu)
SEQ(SP=C9%GCD=1%ISR=CD%TI=Z%II=I%TS=A)
SEQ(SP=C9%GCD=2%ISR=CD%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5B4NNSNW7%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T3(R=Y%DF=Y%TG=40%W=16A0%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=20%CD=S%SI=S%DLI=S)

From me

SCAN(V=4.76%D=9/20%OT=21%CT=53%CU=%PV=N%G=N%TM=48D56850%P=i686-pc-linux-gnu)
SEQ(SP=C9%GCD=1%ISR=CE%TI=Z%II=I%TS=8)                                        
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)

SEQ.TS changed from A to 8, no OPS, window scaling changed from 7 to 4, T3,T4,T6,T7 not received, IE.TOSI changed from 20 to Z.

From Fyodor

SCAN(V=4.76%D=9/17%OT=21%CT=53%CU=%PV=N%G=Y%TM=48D17EA1%P=x86_64-unknown-linux-gnu)
SEQ(SP=C8%GCD=1%ISR=CE%TI=Z%II=I%TS=8)
SEQ(SP=CB%GCD=1%ISR=D4%TI=Z%II=I%TS=8)
SEQ(SP=CC%GCD=1%ISR=D3%TI=Z%II=I%TS=8)
OPS(O1=M5ACST11NW4%O2=M5ACST11NW4%O3=M5ACNNT11NW4%O4=M5ACST11NW4%O5=M5ACST11NW4%O6=M5ACST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5ACNNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)

SEQ.TS changed from A to 8, MSS changed from 5B4 to 5AC, window scaling changed from 7 to 4, T3,T7 not received, TOSI changed from 20 to Z.

From scanme

SCAN(V=4.76%D=9/17%OT=21%CT=53%CU=%PV=N%G=Y%TM=48D18252%P=x86_64-unknown-linux-gnu)
SEQ(SP=CB%GCD=1%ISR=CE%TI=Z%II=I%TS=8)
OPS(O1=M5B4ST11NW4%O2=M5B4ST11NW4%O3=M5B4NNT11NW4%O4=M5B4ST11NW4%O5=M5B4ST11NW4%O6=M5B4ST11)
WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)
ECN(R=Y%DF=Y%TG=40%W=16D0%O=M5B4NNSNW4%CC=N%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%TOSI=Z%CD=S%SI=S%DLI=S)

SEQ.TS changed from A to 8, window scaling changed from 7 to 4, T3,T7 not received, IE.TOSI changed from 20 to Z.

UCSD hosts

brandon_ucsd_os/unwrapped
#.#!#.#!#.#.
2008-10-01 18:40:50.648801
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 6
Number of diffs seen: 6
Average diffs/print: 1.00
Number of prints with zero guesses: 0 (0.00%)
Number of prints with some guesses (none perfect): 4 (66.67%)
Number of unique perfect matches: 2 (33.33%)
G=Y prints: 6 (100.00%)  Not G=Y prints: 0 (0.00%)
Average match percentage: 97.00
Average match percentage (non-perfect matches excluded): 95.50
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
SEQ.TS        2   200 total points
SEQ.TI        1   100 total points
IE.T          2    30 total points
ECN.O         2    30 total points
U1.T          2    30 total points
T3.W          1    25 total points
T3.O          2    20 total points
ECN.DF        1    20 total points
OPS.O5        1    20 total points
OPS.O4        1    20 total points
OPS.O3        1    20 total points
OPS.O2        1    20 total points
T3.DF         1    20 total points
T1.DF         1    20 total points
OPS.O1        1    20 total points
ECN.W         1    15 total points
Failed tests by common name
*.TS          2   200 total points
OPS.O* *.O    9   150 total points
*.TI          1   100 total points
*.T           4    60 total points
*.DF          3    60 total points
*.W           2    40 total points
goomba_ucsd_os/unwrapped
#.#.#.#.#.#.#.
2008-10-01 18:41:37.631842
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 7
Number of diffs seen: 7
Average diffs/print: 1.00
Number of prints with zero guesses: 0 (0.00%)
Number of prints with some guesses (none perfect): 7 (100.00%)
Number of unique perfect matches: 0 (0.00%)
G=Y prints: 0 (0.00%)  Not G=Y prints: 7 (100.00%)
Average match percentage: 94.00
Average match percentage (non-perfect matches excluded): 94.00
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
U1.TOS        6   300 total points
IE.TOSI       7   175 total points
SEQ.TI        1   100 total points
OPS.O5        3    60 total points
OPS.O4        3    60 total points
OPS.O1        3    60 total points
OPS.O3        3    60 total points
OPS.O2        3    60 total points
ECN.O         3    45 total points
T6.T          2    30 total points
T3.O          3    30 total points
T1.T          2    30 total points
T5.T          2    30 total points
U1.T          2    30 total points
ECN.T         2    30 total points
T4.T          2    30 total points
IE.T          2    30 total points
T3.W          1    25 total points
T3.DF         1    20 total points
OPS.O6        1    20 total points
ECN.DF        1    20 total points
T1.DF         1    20 total points
WIN.W3        1    15 total points
T3.T          1    15 total points
ECN.W         1    15 total points
T7.T          1    15 total points
WIN.W2        1    15 total points
WIN.W1        1    15 total points
WIN.W5        1    15 total points
WIN.W4        1    15 total points
Failed tests by common name
OPS.O* *.O   22   395 total points
*.TOS         6   300 total points
*.T          16   240 total points
*.TOSI        7   175 total points
*.TI          1   100 total points
WIN.W*        5    75 total points
*.DF          3    60 total points
*.W           2    40 total points
david_ucsd_os/unwrapped
#.#.#.#.#.#.#.
2008-10-01 18:43:31.575245
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 7
Number of diffs seen: 7
Average diffs/print: 1.00
Number of prints with zero guesses: 0 (0.00%)
Number of prints with some guesses (none perfect): 7 (100.00%)
Number of unique perfect matches: 0 (0.00%)
G=Y prints: 0 (0.00%)  Not G=Y prints: 7 (100.00%)
Average match percentage: 93.29
Average match percentage (non-perfect matches excluded): 93.29
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
SEQ.ISR       5   125 total points
U1.RUCK       1   100 total points
SEQ.TI        1   100 total points
IE.TOSI       4   100 total points
T5.T          6    90 total points
U1.T          6    90 total points
T1.T          5    75 total points
ECN.T         5    75 total points
IE.T          5    75 total points
U1.TOS        1    50 total points
SEQ.SP        2    50 total points
IE.DFI        1    40 total points
OPS.O5        2    40 total points
OPS.O4        2    40 total points
OPS.O1        2    40 total points
OPS.O3        2    40 total points
OPS.O2        2    40 total points
ECN.O         2    30 total points
ECN.DF        1    20 total points
T1.DF         1    20 total points
WIN.W3        1    15 total points
ECN.W         1    15 total points
WIN.W2        1    15 total points
WIN.W1        1    15 total points
WIN.W5        1    15 total points
WIN.W4        1    15 total points
Failed tests by common name
*.T          27   405 total points
OPS.O* *.O   12   230 total points
*.ISR         5   125 total points
*.TI          1   100 total points
*.RUCK        1   100 total points
*.TOSI        4   100 total points
WIN.W*        5    75 total points
*.SP          2    50 total points
*.TOS         1    50 total points
*.DFI         1    40 total points
*.DF          2    40 total points
*.W           1    15 total points

Diff from brandon_ucsd_os to goomba_ucsd_os

Linux and FreeBSD: T changed from 40 to 3F. TOS changed from S, Z, C0 to 20. TOSI changed from S, Z to 20.

IOS: SEQ, OPS, WIN, ECN, T1, T2, T3, T4 all missing.

Diff from brandon_uscd_os to david_uscd_os

Linux and FreeBSD: T changed from 40 to 3D, 3C, 3C, 3E, 3B. TOS changed from C0, 0 to 0.TOSI changed from S, Z, to Z.

IOS: SEQ, OPS, WIN, ECN, T1, T2, T3, T4 all missing. Didn't receive T6, T7.

Didn't receive any T3, T4, T6, T7, possibly blocked by firewall.

Stats from brandon_ucsd_os/os_all_david.nmap

2008-10-03 04:07:18.679919
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 182763
Number of diffs seen: 95172
Average diffs/print: 0.52
Number of prints with zero guesses: 165261 (90.42%)
Number of prints with some guesses (none perfect): 5088 (2.78%)
Number of unique perfect matches: 6519 (3.57%)
*** Number of prints with 2 perfect matches: 1328 (0.73%)
*** Number of prints with 3 perfect matches: 223 (0.12%)
*** Number of prints with 4 perfect matches: 117 (0.06%)
*** Number of prints with 5 perfect matches: 50 (0.03%)
*** Number of prints with 6 perfect matches: 34 (0.02%)
*** Number of prints with 7 perfect matches: 47 (0.03%)
*** Number of prints with 8 perfect matches: 214 (0.12%)
*** Number of prints with 9 perfect matches: 351 (0.19%)
*** Number of prints with 10 perfect matches: 130 (0.07%)
*** Number of prints with 11 perfect matches: 6 (0.00%)
*** Number of prints with 12 perfect matches: 30 (0.02%)
*** Number of prints with 13 perfect matches: 8 (0.00%)
*** Number of prints with 14 perfect matches: 106 (0.06%)
*** Number of prints with 15 perfect matches: 10 (0.01%)
*** Number of prints with 17 perfect matches: 71 (0.04%)
*** Number of prints with 19 perfect matches: 30 (0.02%)
*** Number of prints with 20 perfect matches: 2049 (1.12%)
*** Number of prints with 21 perfect matches: 3 (0.00%)
*** Number of prints with 22 perfect matches: 8 (0.00%)
*** Number of prints with 23 perfect matches: 6 (0.00%)
*** Number of prints with 24 perfect matches: 872 (0.48%)
*** Number of prints with 25 perfect matches: 32 (0.02%)
*** Number of prints with 26 perfect matches: 15 (0.01%)
*** Number of prints with 28 perfect matches: 11 (0.01%)
*** Number of prints with 29 perfect matches: 3 (0.00%)
*** Number of prints with 30 perfect matches: 9 (0.00%)
*** Number of prints with 31 perfect matches: 1 (0.00%)
*** Number of prints with 34 perfect matches: 5 (0.00%)
*** Number of prints with 36 perfect matches: 126 (0.07%)
G=Y prints: 6298 (3.45%)  Not G=Y prints: 176465 (96.55%)
Average match percentage: 99.64
Average match percentage (non-perfect matches excluded): 93.25
Failed fingermatch: 145
Failed fingerdiff: 0
Failed tests
T7.A       2155 43100 total points
OPS.O1     1614 32280 total points
OPS.O2     1610 32200 total points
OPS.O3     1606 32120 total points
OPS.O5     1598 31960 total points
OPS.O4     1598 31960 total points
OPS.O6     1471 29420 total points
T6.F        939 28170 total points
T3.A       1384 27680 total points
ECN.O      1693 25395 total points
T7.F        827 24810 total points
T1.DF      1225 24500 total points
ECN.DF     1218 24360 total points
SEQ.ISR     883 22075 total points
T5.S       1043 20860 total points
WIN.W6     1367 20505 total points
WIN.W5     1346 20190 total points
WIN.W4     1342 20130 total points
WIN.W3     1340 20100 total points
ECN.W      1271 19065 total points
WIN.W2     1227 18405 total points
WIN.W1     1227 18405 total points
SEQ.SP      658 16450 total points
T3.R        150 12000 total points
T4.F        389 11670 total points
SEQ.TS      116 11600 total points
IE.TOSI     458 11450 total points
T3.F        370 11100 total points
T2.F        351 10530 total points
T2.R        102  8160 total points
U1.T        465  6975 total points
IE.DFI      156  6240 total points
SEQ.GCD      72  5400 total points
T6.T        351  5265 total points
T7.T        335  5025 total points
U1.RUCK      45  4500 total points
ECN.R        42  4200 total points
IE.T        262  3930 total points
T4.T        262  3930 total points
T1.T        195  2925 total points
U1.IPL       29  2900 total points
SEQ.TI       29  2900 total points
T6.A        142  2840 total points
T5.T        186  2790 total points
T6.W        111  2775 total points
ECN.T       184  2760 total points
T4.R         26  2600 total points
T7.R         32  2560 total points
T7.W         99  2475 total points
T3.DF       122  2440 total points
T3.W         97  2425 total points
U1.TOS       44  2200 total points
T3.O        201  2010 total points
T6.TG       134  2010 total points
T7.S         89  1780 total points
T7.TG       116  1740 total points
SEQ.SS       20  1600 total points
T3.T        103  1545 total points
U1.UN        15  1500 total points
T5.TG        97  1455 total points
T4.W         55  1375 total points
T4.TG        84  1260 total points
T4.A         62  1240 total points
T1.TG        79  1185 total points
T6.O        113  1130 total points
T2.T         72  1080 total points
T7.O        102  1020 total points
ECN.TG       67  1005 total points
IE.CD         9   900 total points
T6.R          9   900 total points
T6.DF        45   900 total points
T3.TG        59   885 total points
T4.DF        43   860 total points
T2.TG        57   855 total points
T5.DF        41   820 total points
IE.R         16   800 total points
IE.TG        50   750 total points
T7.DF        33   660 total points
T5.W         25   625 total points
SEQ.II        6   600 total points
T4.O         59   590 total points
ECN.CC        5   500 total points
T1.R          5   500 total points
T3.S         25   500 total points
T5.R          4   400 total points
U1.RIPCK      4   400 total points
T2.DF        16   320 total points
T1.F          9   270 total points
T5.F          7   210 total points
U1.R          4   200 total points
ECN.Q        10   200 total points
T5.RD         9   180 total points
T2.O         16   160 total points
T6.S          8   160 total points
T5.A          6   120 total points
T1.S          6   120 total points
T3.Q          6   120 total points
U1.RIPL       1   100 total points
U1.RID        1   100 total points
T1.A          5   100 total points
T2.S          4    80 total points
T4.S          3    60 total points
U1.DF         3    60 total points
T2.Q          3    60 total points
T2.W          2    50 total points
T2.A          2    40 total points
T5.O          3    30 total points
T5.Q          1    20 total points
T6.Q          1    20 total points
T1.Q          1    20 total points
T6.RD         1    20 total points
T4.Q          1    20 total points
T4.RD         1    20 total points
Failed tests by common name
OPS.O* *.O 11684  220275 total points
WIN.W*      7849  117735 total points
*.F         2892   86760 total points
*.A         3756   75120 total points
*.DF        2746   54920 total points
*.T         2415   36225 total points
*.R          390   32320 total points
*.W         1660   28790 total points
*.S         1178   23560 total points
*.ISR        883   22075 total points
*.SP         658   16450 total points
*.TS         116   11600 total points
*.TOSI       458   11450 total points
*.TG         743   11145 total points
*.DFI        156    6240 total points
*.GCD         72    5400 total points
*.RUCK        45    4500 total points
*.TI          29    2900 total points
*.IPL         29    2900 total points
*.TOS         44    2200 total points
*.SS          20    1600 total points
*.UN          15    1500 total points
*.CD           9     900 total points
*.II           6     600 total points
*.CC           5     500 total points
*.Q           23     460 total points
*.RIPCK        4     400 total points
*.RD          11     220 total points
*.RID          1     100 total points
*.RIPL         1     100 total points

Stats from nmapsubmit-osfp-071608

nmapsubmit-osfp-071608
2008-09-26 09:58:47.337230
$Id: nmap-os-db 10243 2008-09-17 22:32:13Z david $
Number of fingerprints seen: 311
Number of diffs seen: 314
Average diffs/print: 1.01
Number of perfect matches: 224 (72.03%)
*** Number of prints with 2 perfect matches: 1 (0.00%)
*** Number of prints with 3 perfect matches: 1 (0.00%)
Average match percentage: 98.64
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
U1.RUCK     6   600 total points
U1.RID      6   600 total points
T3.R        6   480 total points
U1.TOS      9   450 total points
U1.IPL      4   400 total points
SEQ.TI      4   400 total points
SEQ.TS      4   400 total points
SEQ.II      4   400 total points
ECN.R       4   400 total points
U1.T       23   345 total points
T5.T       22   330 total points
SEQ.ISR    13   325 total points
ECN.T      20   300 total points
IE.TOSI    12   300 total points
T6.R        3   300 total points
SEQ.SP     12   300 total points
T6.T       19   285 total points
T1.T       19   285 total points
T4.T       19   285 total points
IE.DFI      7   280 total points
IE.T       18   270 total points
T7.R        3   240 total points
T7.T       16   240 total points
T3.T       14   210 total points
T1.R        2   200 total points
ECN.O      12   180 total points
OPS.O4      8   160 total points
OPS.O6      8   160 total points
OPS.O1      8   160 total points
OPS.O3      8   160 total points
OPS.O2      8   160 total points
OPS.O5      8   160 total points
T2.R        2   160 total points
SEQ.GCD     2   150 total points
T1.DF       7   140 total points
WIN.W4      9   135 total points
T3.W        5   125 total points
ECN.DF      6   120 total points
ECN.W       7   105 total points
T5.S        5   100 total points
T3.DF       5   100 total points
T4.R        1   100 total points
U1.RIPCK    1   100 total points
IE.CD       1   100 total points
T6.DF       5   100 total points
T5.F        3    90 total points
WIN.W3      6    90 total points
WIN.W2      6    90 total points
WIN.W5      6    90 total points
T3.O        8    80 total points
T7.A        4    80 total points
T5.DF       4    80 total points
WIN.W1      5    75 total points
WIN.W6      5    75 total points
T2.T        4    60 total points
T5.A        3    60 total points
T7.S        3    60 total points
T6.W        2    50 total points
IE.R        1    50 total points
T4.W        2    50 total points
T5.W        2    50 total points
U1.R        1    50 total points
T4.DF       2    40 total points
T4.S        2    40 total points
T7.DF       2    40 total points
T6.F        1    30 total points
T4.F        1    30 total points
T3.F        1    30 total points
T1.F        1    30 total points
T7.W        1    25 total points
T6.S        1    20 total points
T1.S        1    20 total points
T6.A        1    20 total points
U1.DF       1    20 total points
T3.S        1    20 total points
T5.RD       1    20 total points
T4.A        1    20 total points
T5.TG       1    15 total points
IE.TG       1    15 total points
T4.O        1    10 total points
T6.O        1    10 total points
T7.O        1    10 total points
Failed tests by common name
*.T       174  2610 total points
*.R        23  1980 total points
OPS.O*     48   960 total points
*.DF       32   640 total points
*.RUCK      6   600 total points
*.RID       6   600 total points
WIN.W*     37   555 total points
*.TOS       9   450 total points
*.W        19   405 total points
*.TI        4   400 total points
*.II        4   400 total points
*.IPL       4   400 total points
*.TS        4   400 total points
*.ISR      13   325 total points
*.TOSI     12   300 total points
*.SP       12   300 total points
*.O        23   290 total points
*.DFI       7   280 total points
*.S        13   260 total points
*.F         7   210 total points
*.A         9   180 total points
*.GCD       2   150 total points
*.CD        1   100 total points
*.RIPCK     1   100 total points
*.TG        2    30 total points
*.RD        1    20 total points

stats-osfp-071608-t

With T = TG = 0.

2008-09-27 19:48:37.825057
$Id: nmap-os-db 10243 2008-09-17 22:32:13Z david $
Number of fingerprints seen: 307
Number of diffs seen: 341
Average diffs/print: 1.11
Number of failed matches: 0 (0.00%)
Number of perfect matches: 213 (69.38%)
*** Number of prints with 2 perfect matches: 15 (4.89%)
*** Number of prints with 3 perfect matches: 5 (1.63%)
*** Number of prints with 4 perfect matches: 3 (0.98%)
Average match percentage: 99.04
Failed fingermatch: 4
Failed fingerdiff: 0
Failed tests
U1.RUCK     6   600 total points
U1.RID      6   600 total points
T1.R        5   500 total points
T3.R        6   480 total points
U1.IPL      4   400 total points
SEQ.TS      4   400 total points
SEQ.ISR    16   400 total points
SEQ.SP     15   375 total points
U1.TOS      7   350 total points
ECN.R       3   300 total points
T7.R        3   240 total points
IE.TOSI     9   225 total points
SEQ.II      2   200 total points
T6.R        2   200 total points
ECN.O      13   195 total points
ECN.W      11   165 total points
IE.DFI      4   160 total points
WIN.W4     10   150 total points
SEQ.GCD     2   150 total points
ECN.DF      6   120 total points
T5.S        6   120 total points
T6.DF       6   120 total points
WIN.W3      7   105 total points
WIN.W2      7   105 total points
WIN.W5      7   105 total points
T3.W        4   100 total points
OPS.O4      5   100 total points
OPS.O6      5   100 total points
OPS.O1      5   100 total points
OPS.O3      5   100 total points
OPS.O2      5   100 total points
T4.R        1   100 total points
SEQ.TI      1   100 total points
U1.RIPCK    1   100 total points
T5.DF       5   100 total points
OPS.O5      5   100 total points
IE.CD       1   100 total points
T5.F        3    90 total points
WIN.W1      6    90 total points
WIN.W6      6    90 total points
T7.A        4    80 total points
T2.R        1    80 total points
T5.W        3    75 total points
T3.O        7    70 total points
T5.A        3    60 total points
T3.DF       3    60 total points
T4.DF       3    60 total points
T1.DF       3    60 total points
T7.DF       3    60 total points
IE.R        1    50 total points
U1.R        1    50 total points
T4.S        2    40 total points
T7.S        2    40 total points
T1.F        1    30 total points
T6.W        1    25 total points
T4.W        1    25 total points
T6.S        1    20 total points
T1.S        1    20 total points
T5.RD       1    20 total points
U1.DF       1    20 total points
ECN.Q       1    20 total points
T6.T       55     0 total points
T2.TG       1     0 total points
T1.T       44     0 total points
T5.T       63     0 total points
T3.T       34     0 total points
T1.TG       5     0 total points
T2.T       13     0 total points
ECN.T      47     0 total points
T5.TG       6     0 total points
ECN.TG      4     0 total points
T4.T       55     0 total points
T7.T       48     0 total points
IE.T       57     0 total points
T6.TG       5     0 total points
IE.TG       1     0 total points
T3.TG       4     0 total points
U1.T       62     0 total points
T4.TG       5     0 total points
T7.TG       5     0 total points
Failed tests by common name
*.R        23  2000 total points
WIN.W*     43   645 total points
*.RUCK      6   600 total points
*.RID       6   600 total points
OPS.O*     30   600 total points
*.DF       30   600 total points
*.IPL       4   400 total points
*.TS        4   400 total points
*.ISR      16   400 total points
*.W        20   390 total points
*.SP       15   375 total points
*.TOS       7   350 total points
*.O        20   265 total points
*.S        12   240 total points
*.TOSI      9   225 total points
*.II        2   200 total points
*.DFI       4   160 total points
*.GCD       2   150 total points
*.A         7   140 total points
*.F         4   120 total points
*.TI        1   100 total points
*.CD        1   100 total points
*.RIPCK     1   100 total points
*.Q         1    20 total points
*.RD        1    20 total points
*.T       478     0 total points
*.TG       36     0 total points

stats-random-os-10000-092608-t

With T = TG = 0.

2008-09-27 11:07:35.060070
$Id: nmap-os-db 10243 2008-09-17 22:32:13Z david $
Number of fingerprints seen: 569
Number of diffs seen: 803
Average diffs/print: 1.41
Number of failed matches: 171 (30.05%)
Number of perfect matches: 42 (7.38%)
*** Number of prints with 2 perfect matches: 2 (0.35%)
*** Number of prints with 3 perfect matches: 14 (2.46%)
*** Number of prints with 36 perfect matches: 1 (0.18%)
*** Number of prints with 5 perfect matches: 17 (2.99%)
*** Number of prints with 6 perfect matches: 8 (1.41%)
*** Number of prints with 8 perfect matches: 4 (0.70%)
*** Number of prints with 11 perfect matches: 1 (0.18%)
*** Number of prints with 14 perfect matches: 3 (0.53%)
*** Number of prints with 16 perfect matches: 1 (0.18%)
*** Number of prints with 23 perfect matches: 1 (0.18%)
*** Number of prints with 4 perfect matches: 13 (2.28%)
*** Number of prints with 26 perfect matches: 2 (0.35%)
*** Number of prints with 30 perfect matches: 1 (0.18%)
Average match percentage: 97.68
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
ECN.R      34  3400 total points
IE.TOSI    95  2375 total points
SEQ.TS     22  2200 total points
ECN.O      84  1260 total points
OPS.O1     56  1120 total points
SEQ.ISR    44  1100 total points
OPS.O2     54  1080 total points
T5.W       43  1075 total points
SEQ.SP     43  1075 total points
OPS.O3     52  1040 total points
OPS.O5     45   900 total points
OPS.O4     44   880 total points
ECN.W      55   825 total points
OPS.O6     41   820 total points
T4.R        7   700 total points
U1.RID      7   700 total points
U1.IPL      6   600 total points
T5.RD      30   600 total points
IE.DFI     14   560 total points
U1.TOS     11   550 total points
SEQ.TI      5   500 total points
T3.R        6   480 total points
SEQ.GCD     6   450 total points
WIN.W1     27   405 total points
T5.DF      20   400 total points
WIN.W6     26   390 total points
T5.S       19   380 total points
T1.DF      19   380 total points
WIN.W3     24   360 total points
WIN.W2     24   360 total points
WIN.W5     24   360 total points
WIN.W4     24   360 total points
U1.RUCK     3   300 total points
U1.RIPCK    3   300 total points
ECN.DF     14   280 total points
IE.R        5   250 total points
IE.CD       2   200 total points
T5.O       19   190 total points
T5.F        4   120 total points
U1.UN       1   100 total points
T5.R        1   100 total points
T1.R        1   100 total points
SEQ.II      1   100 total points
U1.R        2   100 total points
T1.S        5   100 total points
T5.A        4    80 total points
SEQ.SS      1    80 total points
T1.F        2    60 total points
T5.Q        2    40 total points
ECN.Q       2    40 total points
T1.Q        1    20 total points
U1.DF       1    20 total points
T1.T       99     0 total points
T5.T      323     0 total points
IE.TG      77     0 total points
ECN.T      75     0 total points
T5.TG     100     0 total points
ECN.TG     23     0 total points
T1.TG      33     0 total points
IE.T      268     0 total points
U1.T      468     0 total points
Failed tests by common name
OPS.O*    292  5840 total points
*.R        56  5130 total points
*.TOSI     95  2375 total points
WIN.W*    149  2235 total points
*.TS       22  2200 total points
*.W        98  1900 total points
*.O       103  1450 total points
*.ISR      44  1100 total points
*.DF       54  1080 total points
*.SP       43  1075 total points
*.RID       7   700 total points
*.RD       30   600 total points
*.IPL       6   600 total points
*.DFI      14   560 total points
*.TOS      11   550 total points
*.TI        5   500 total points
*.S        24   480 total points
*.GCD       6   450 total points
*.RUCK      3   300 total points
*.RIPCK     3   300 total points
*.CD        2   200 total points
*.F         6   180 total points
*.II        1   100 total points
*.Q         5   100 total points
*.UN        1   100 total points
*.A         4    80 total points
*.SS        1    80 total points
*.T      1233     0 total points
*.TG      233     0 total points

stats-random-os-100000-092908.nmap

2008-10-17 16:43:14.768490
$Id: nmap-os-db 10632 2008-10-15 10:41:49Z fyodor $
Number of fingerprints seen: 1329
Number of diffs seen: 11037
Number of perfect/imperfect diffs: 10359/678
Number of diffs ignored for being below 90%: 120
Average diffs/print: 8.30
Number of prints with zero guesses: 3 (0.23%)
Number of prints with some guesses (none perfect): 798 (60.05%)
Number of unique perfect matches: 128 (9.63%)
*** Number of prints with 2 perfect matches: 24 (1.81%)
*** Number of prints with 3 perfect matches: 8 (0.60%)
*** Number of prints with 4 perfect matches: 10 (0.75%)
*** Number of prints with 5 perfect matches: 14 (1.05%)
*** Number of prints with 6 perfect matches: 35 (2.63%)
*** Number of prints with 7 perfect matches: 4 (0.30%)
*** Number of prints with 8 perfect matches: 4 (0.30%)
*** Number of prints with 9 perfect matches: 3 (0.23%)
*** Number of prints with 10 perfect matches: 2 (0.15%)
*** Number of prints with 13 perfect matches: 4 (0.30%)
*** Number of prints with 14 perfect matches: 2 (0.15%)
*** Number of prints with 15 perfect matches: 3 (0.23%)
*** Number of prints with 17 perfect matches: 6 (0.45%)
*** Number of prints with 19 perfect matches: 3 (0.23%)
*** Number of prints with 21 perfect matches: 13 (0.98%)
*** Number of prints with 22 perfect matches: 1 (0.08%)
*** Number of prints with 23 perfect matches: 6 (0.45%)
*** Number of prints with 24 perfect matches: 14 (1.05%)
*** Number of prints with 28 perfect matches: 12 (0.90%)
*** Number of prints with 31 perfect matches: 1 (0.08%)
*** Number of prints with 34 perfect matches: 2 (0.15%)
*** Number of prints with 36 perfect matches: 229 (17.23%)
G=Y prints: 24 (1.81%)  Not G=Y prints: 1305 (98.19%)
Average match percentage: 99.69
Average match percentage (non-perfect matches only): 94.89
Total T test mismatches: 2212
	-206:     3 
	-202:    10 
	-198:     5 
	-197:     2 
	-196:     7 
	-195:     1 
	-193:     7 
	-192:     6 
	-191:    14 
	-190:     5 
	-189:    10 
	-188:     9 
	-187:    10 
	-127:     2 
	-124:     4 
	 -94:     1 
	 -89:     1 
	 -86:     1 
	 -78:    10 
	 -64:     4 
	 -63:     3 
	 -61:     5 
	 -60:    10 
	 -37:     1 
	 -35:     1 
	 -33:     1 
	 -31:     3 
	 -29:     1 
	 -26:     5 
	  -9:     8 
	  -8:    12 
	  -7:    23 
	  -6:    16 
	  -5:    35 #
	  -4:   111 ####
	  -3:   122 ####
	  -2:   157 #####
	  -1:   244 ########
	  +1:   244 ########
	  +2:   252 #########
	  +3:   191 ######
	  +4:   176 ######
	  +5:    94 ###
	  +6:    88 ###
	  +7:    45 #
	  +8:    49 #
	  +9:    27 
	 +12:     1 
	 +13:    11 
	 +14:     2 
	 +21:     1 
	 +25:     1 
	 +31:     1 
	 +62:     4 
	 +64:     1 
	 +94:     1 
	+130:    15 
	+132:     5 
	+160:     2 
	+184:     6 
	+185:     2 
	+188:     5 
	+189:     4 
	+191:     7 
	+192:    16 
	+193:    10 
	+194:     8 
	+195:    16 
	+196:     5 
	+197:     1 
	+199:     3 
	+200:     3 
	+216:     5 
	+220:    13 
	+65322:     3 
	+65323:     6 
	+65326:     9 
	+65329:     9 
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
T4.T        174/253    (69%)  2610 total points
ECN.T       187/277    (68%)  2805 total points
T1.T        188/284    (66%)  2820 total points
T5.T        329/624    (53%)  4935 total points
T2.T         30/57     (53%)   450 total points
T6.T        302/587    (51%)  4530 total points
T7.T        233/499    (47%)  3495 total points
U1.T        356/764    (47%)  5340 total points
T3.T        161/353    (46%)  2415 total points
IE.T        252/666    (38%)  3780 total points
ECN.O        94/480    (20%)  1410 total points
T2.TG         8/45     (18%)   120 total points
T3.O         69/543    (13%)   690 total points
OPS.O1       56/495    (11%)  1120 total points
U1.TOS       85/764    (11%)  4250 total points
OPS.O2       55/495    (11%)  1100 total points
OPS.O4       53/495    (11%)  1060 total points
OPS.O5       52/495    (11%)  1040 total points
OPS.O3       51/495    (10%)  1020 total points
OPS.O6       49/495    (10%)   980 total points
T4.TG        15/162    ( 9%)   225 total points
ECN.W        39/480    ( 8%)   585 total points
SEQ.SP       45/706    ( 6%)  1125 total points
T3.TG        12/190    ( 6%)   180 total points
ECN.TG       12/203    ( 6%)   180 total points
T1.TG        13/231    ( 6%)   195 total points
SEQ.ISR      38/706    ( 5%)   950 total points
T3.W         28/543    ( 5%)   700 total points
WIN.W1       24/491    ( 5%)   360 total points
SEQ.SS        6/124    ( 5%)   480 total points
WIN.W2       21/491    ( 4%)   315 total points
WIN.W6       18/491    ( 4%)   270 total points
T1.DF        18/515    ( 3%)   360 total points
WIN.W4       14/491    ( 3%)   210 total points
IE.TOSI     207/7528   ( 3%)  5175 total points
SEQ.TS       19/706    ( 3%)  1900 total points
T6.RD        56/2092   ( 3%)  1120 total points
WIN.W3       13/491    ( 3%)   195 total points
WIN.W5       13/491    ( 3%)   195 total points
SEQ.II        7/277    ( 3%)   700 total points
T5.RD        55/2413   ( 2%)  1100 total points
U1.RID       17/764    ( 2%)  1700 total points
T3.F         11/543    ( 2%)   330 total points
T2.A          2/102    ( 2%)    40 total points
ECN.DF        9/480    ( 2%)   180 total points
T5.W         45/2413   ( 2%)  1125 total points
T5.TG        27/1789   ( 2%)   405 total points
T3.S          8/543    ( 1%)   160 total points
ECN.R         6/510    ( 1%)   600 total points
T3.R          8/713    ( 1%)   640 total points
T6.DF        23/2092   ( 1%)   460 total points
T6.TG        16/1505   ( 1%)   240 total points
T7.TG        14/1375   ( 1%)   210 total points
T2.R          5/494    ( 1%)   400 total points
T4.R          5/495    ( 1%)   500 total points
T5.S         19/2413   ( 1%)   380 total points
U1.IPL        5/764    ( 1%)   500 total points
T6.A         13/2092   ( 1%)   260 total points
T7.A         11/1874   ( 1%)   220 total points
T5.O         10/2413   ( 0%)   100 total points
T5.DF        10/2413   ( 0%)   200 total points
IE.TG        27/6862   ( 0%)   405 total points
U1.RUCK       3/764    ( 0%)   300 total points
T1.S          2/515    ( 0%)    40 total points
IE.DFI       28/7528   ( 0%)  1120 total points
T3.DF         2/543    ( 0%)    40 total points
T7.DF         6/1874   ( 0%)   120 total points
T7.R          7/2437   ( 0%)   560 total points
T4.W          1/415    ( 0%)    25 total points
T6.W          5/2092   ( 0%)   125 total points
T7.S          4/1874   ( 0%)    80 total points
ECN.CC        1/480    ( 0%)   100 total points
T6.F          4/2092   ( 0%)   120 total points
T3.A          1/543    ( 0%)    20 total points
SEQ.TI        1/627    ( 0%)   100 total points
T6.S          3/2092   ( 0%)    60 total points
T7.F          1/1874   ( 0%)    30 total points
T7.W          1/1874   ( 0%)    25 total points
T5.F          1/2413   ( 0%)    30 total points
IE.CD         3/7528   ( 0%)   300 total points
U1.R          4/11041  ( 0%)   200 total points
IE.R          2/11051  ( 0%)   100 total points
Failed tests by common name
*.T        2212/4364   (50.6874%) 33180 total points
*.TOS        85/764    (11.1257%)  4250 total points
OPS.O* *.O  489/6406   (7.6335%)  8520 total points
*.SP         45/706    (6.3739%)  1125 total points
*.ISR        38/706    (5.3824%)   950 total points
*.SS          6/124    (4.8387%)   480 total points
WIN.W*      103/2946   (3.4963%)  1545 total points
*.TOSI      207/7528   (2.7497%)  5175 total points
*.TS         19/706    (2.6912%)  1900 total points
*.II          7/277    (2.5271%)   700 total points
*.RD        111/4505   (2.4639%)  2220 total points
*.RID        17/764    (2.2251%)  1700 total points
*.W         119/7817   (1.5223%)  2585 total points
*.TG        144/12362  (1.1649%)  2160 total points
*.DF         68/7917   (0.8589%)  1360 total points
*.IPL         5/764    (0.6545%)   500 total points
*.A          27/4611   (0.5856%)   540 total points
*.S          36/7437   (0.4841%)   720 total points
*.RUCK        3/764    (0.3927%)   300 total points
*.DFI        28/7528   (0.3719%)  1120 total points
*.F          17/6922   (0.2456%)   510 total points
*.CC          1/480    (0.2083%)   100 total points
*.TI          1/627    (0.1595%)   100 total points
*.R          37/26741  (0.1384%)  3000 total points
*.CD          3/7528   (0.0399%)   300 total points

2008-10-03 10:11:08.080975

stats-random-os-10000-100508

2008-10-06 20:53:38.809092
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 636
Number of diffs seen: 956
Number of perfect/imperfect diffs: 650/306
Number of diffs ignored for being below 90%: 103
Average diffs/print: 1.50
Number of prints with zero guesses: 144 (22.64%)
Number of prints with some guesses (none perfect): 409 (64.31%)
Number of unique perfect matches: 23 (3.62%)
*** Number of prints with 2 perfect matches: 18 (2.83%)
*** Number of prints with 3 perfect matches: 2 (0.31%)
*** Number of prints with 4 perfect matches: 1 (0.16%)
*** Number of prints with 5 perfect matches: 3 (0.47%)
*** Number of prints with 6 perfect matches: 15 (2.36%)
*** Number of prints with 8 perfect matches: 3 (0.47%)
*** Number of prints with 13 perfect matches: 4 (0.63%)
*** Number of prints with 34 perfect matches: 3 (0.47%)
*** Number of prints with 18 perfect matches: 1 (0.16%)
*** Number of prints with 28 perfect matches: 10 (1.57%)
G=Y prints: 93 (14.62%)  Not G=Y prints: 543 (85.38%)
Average match percentage: 98.48
Average match percentage (non-perfect matches only): 95.25
Total T test mismatches: 589
	-227:     1 
	-206:     1 
	-195:     1 
	-190:     2 
	-189:     2 
	-188:     3 
	-187:     1 
	-186:     2 
	-184:     2 
	-183:     1 
	 -89:     1 
	 -88:     1 
	 -62:     1 
	 -61:     1 
	 -58:     4 
	 -55:     6 
	 -27:     1 
	 -15:     1 
	 -11:     2 
	 -10:     5 
	  -8:    11 #
	  -7:    10 #
	  -5:    12 #
	  -4:    23 ###
	  -3:    34 ####
	  -2:    37 #####
	  -1:    39 #####
	  +1:    55 #######
	  +2:    33 ####
	  +3:    36 ####
	  +4:    49 ######
	  +5:    36 ####
	  +6:    19 ##
	  +7:    16 ##
	  +8:    18 ##
	  +9:    20 ##
	 +10:     1 
	 +11:     5 
	 +19:     1 
	 +26:     2 
	 +73:     4 
	 +86:     4 
	 +99:     2 
	+126:     3 
	+130:     1 
	+131:     1 
	+133:     6 
	+183:     3 
	+184:     1 
	+186:     6 
	+187:     1 
	+188:    11 #
	+189:     5 
	+190:     2 
	+191:     5 
	+192:     5 
	+193:     3 
	+194:     8 #
	+195:     1 
	+196:     8 #
	+197:     3 
	+198:     3 
	+200:     4 
	+65320:     3 
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
U1.T        180  2700 total points
IE.TOSI      96  2400 total points
T5.T        159  2385 total points
ECN.R        22  2200 total points
IE.T        109  1635 total points
T1.T         79  1185 total points
U1.TOS       20  1000 total points
ECN.T        62   930 total points
T5.W         36   900 total points
T5.RD        38   760 total points
T4.R          7   700 total points
SEQ.ISR      23   575 total points
SEQ.SP       21   525 total points
ECN.O        34   510 total points
OPS.O1       22   440 total points
OPS.O3       21   420 total points
OPS.O2       20   400 total points
OPS.O4       19   380 total points
OPS.O5       18   360 total points
OPS.O6       16   320 total points
T5.TG        20   300 total points
SEQ.TS        3   300 total points
T3.R          3   240 total points
ECN.W        15   225 total points
U1.RUCK       2   200 total points
T5.S         10   200 total points
SEQ.TI        2   200 total points
U1.RID        2   200 total points
T1.DF         8   160 total points
IE.TG        10   150 total points
T5.DF         6   120 total points
T1.TG         7   105 total points
ECN.TG        7   105 total points
U1.IPL        1   100 total points
T6.R          1   100 total points
U1.R          2   100 total points
WIN.W1        6    90 total points
IE.DFI        2    80 total points
WIN.W2        5    75 total points
SEQ.GCD       1    75 total points
T5.O          6    60 total points
WIN.W3        4    60 total points
WIN.W6        4    60 total points
WIN.W5        4    60 total points
WIN.W4        4    60 total points
T5.A          1    20 total points
ECN.DF        1    20 total points
Failed tests by common name
*.T         589  8835 total points
*.R          35  3340 total points
OPS.O* *.O  156  2890 total points
*.TOSI       96  2400 total points
*.W          51  1125 total points
*.TOS        20  1000 total points
*.RD         38   760 total points
*.TG         44   660 total points
*.ISR        23   575 total points
*.SP         21   525 total points
WIN.W*       27   405 total points
*.TS          3   300 total points
*.DF         15   300 total points
*.S          10   200 total points
*.RUCK        2   200 total points
*.RID         2   200 total points
*.TI          2   200 total points
*.IPL         1   100 total points
*.DFI         2    80 total points
*.GCD         1    75 total points
*.A           1    20 total points

random-os-ttl-10000-100608.nmap

../random-os-ttl-10000-100608.nmap
2008-10-06 22:37:18.095824
$Id: nmap-os-db 10440 2008-10-02 01:45:42Z david $
Number of fingerprints seen: 662
Number of diffs seen: 1188
Number of perfect/imperfect diffs: 932/256
Number of diffs ignored for being below 90%: 109
Average diffs/print: 1.79
Number of prints with zero guesses: 172 (25.98%)
Number of prints with some guesses (none perfect): 365 (55.14%)
Number of unique perfect matches: 31 (4.68%)
*** Number of prints with 2 perfect matches: 28 (4.23%)
*** Number of prints with 3 perfect matches: 5 (0.76%)
*** Number of prints with 4 perfect matches: 2 (0.30%)
*** Number of prints with 5 perfect matches: 3 (0.45%)
*** Number of prints with 6 perfect matches: 19 (2.87%)
*** Number of prints with 8 perfect matches: 14 (2.11%)
*** Number of prints with 13 perfect matches: 4 (0.60%)
*** Number of prints with 34 perfect matches: 4 (0.60%)
*** Number of prints with 20 perfect matches: 2 (0.30%)
*** Number of prints with 24 perfect matches: 2 (0.30%)
*** Number of prints with 25 perfect matches: 1 (0.15%)
*** Number of prints with 28 perfect matches: 10 (1.51%)
G=Y prints: 146 (22.05%)  Not G=Y prints: 516 (77.95%)
Average match percentage: 99.01
Average match percentage (non-perfect matches only): 95.40
Total T test mismatches: 223
	-201:     1 
	-185:     5 #
	-184:     1 
	-180:     2 
	-179:     1 
	 -55:     2 
	 -23:     1 
	 -10:     1 
	  -7:     3 #
	  -6:     5 #
	  -4:    10 ###
	  -3:     4 #
	  -2:     6 ##
	  -1:     3 #
	  +1:    51 ##################
	  +2:    18 ######
	  +3:    11 ###
	  +4:    20 #######
	  +5:    10 ###
	  +6:     1 
	 +12:     1 
	+122:     3 #
	+176:     3 #
	+182:     5 #
	+183:     4 #
	+184:     4 #
	+185:     6 ##
	+186:     4 #
	+187:     2 
	+188:     6 ##
	+189:     3 #
	+190:     7 ##
	+191:     2 
	+192:     6 ##
	+193:     2 
	+194:     1 
	+195:     2 
	+196:     3 #
	+65326:     3 #
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
ECN.R        25  2500 total points
IE.TOSI      88  2200 total points
T5.T         75  1125 total points
U1.T         65   975 total points
U1.TOS       16   800 total points
T5.W         31   775 total points
T5.RD        31   620 total points
T1.R          6   600 total points
SEQ.SP       23   575 total points
IE.T         38   570 total points
SEQ.ISR      22   550 total points
OPS.O3       27   540 total points
OPS.O1       25   500 total points
T4.R          5   500 total points
ECN.O        33   495 total points
OPS.O4       24   480 total points
OPS.O2       24   480 total points
OPS.O5       23   460 total points
OPS.O6       19   380 total points
T1.T         25   375 total points
T3.R          4   320 total points
ECN.T        20   300 total points
SEQ.TS        3   300 total points
ECN.W        18   270 total points
U1.RUCK       2   200 total points
U1.RID        2   200 total points
WIN.W3       13   195 total points
T5.S          9   180 total points
WIN.W2       12   180 total points
WIN.W6       12   180 total points
WIN.W5       12   180 total points
WIN.W4       12   180 total points
WIN.W1       11   165 total points
T1.DF         8   160 total points
T5.TG        10   150 total points
T5.DF         7   140 total points
U1.IPL        1   100 total points
SEQ.TI        1   100 total points
T6.R          1   100 total points
U1.R          2   100 total points
IE.DFI        2    80 total points
SEQ.SS        1    80 total points
IE.TG         5    75 total points
T1.TG         4    60 total points
ECN.TG        3    45 total points
ECN.DF        2    40 total points
T5.O          3    30 total points
Failed tests by common name
*.R          43  4120 total points
OPS.O* *.O  178  3365 total points
*.T         223  3345 total points
*.TOSI       88  2200 total points
WIN.W*       72  1080 total points
*.W          49  1045 total points
*.TOS        16   800 total points
*.RD         31   620 total points
*.SP         23   575 total points
*.ISR        22   550 total points
*.DF         17   340 total points
*.TG         22   330 total points
*.TS          3   300 total points
*.RUCK        2   200 total points
*.RID         2   200 total points
*.S           9   180 total points
*.TI          1   100 total points
*.IPL         1   100 total points
*.DFI         2    80 total points
*.SS          1    80 total points

random-os-10000-100508-ttlhack

This is with the changing of all T results to TG results with the same value.

2008-10-07 19:53:44.501535
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 636
Number of diffs seen: 5635
Number of perfect/imperfect diffs: 5329/306
Number of diffs ignored for being below 90%: 103
Average diffs/print: 8.86
Number of prints with zero guesses: 14 (2.20%)
Number of prints with some guesses (none perfect): 409 (64.31%)
Number of unique perfect matches: 24 (3.77%)
*** Number of prints with 2 perfect matches: 17 (2.67%)
*** Number of prints with 3 perfect matches: 2 (0.31%)
*** Number of prints with 36 perfect matches: 130 (20.44%)
*** Number of prints with 5 perfect matches: 3 (0.47%)
*** Number of prints with 6 perfect matches: 15 (2.36%)
*** Number of prints with 8 perfect matches: 3 (0.47%)
*** Number of prints with 13 perfect matches: 4 (0.63%)
*** Number of prints with 34 perfect matches: 3 (0.47%)
*** Number of prints with 18 perfect matches: 1 (0.16%)
*** Number of prints with 4 perfect matches: 1 (0.16%)
*** Number of prints with 28 perfect matches: 10 (1.57%)
G=Y prints: 93 (14.62%)  Not G=Y prints: 543 (85.38%)
Average match percentage: 99.74
Average match percentage (non-perfect matches only): 95.25
Total T test mismatches: 0
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
U1.TG       180  2700 total points
T5.TG       179  2685 total points
IE.TOSI      96  2400 total points
ECN.R        22  2200 total points
IE.TG       119  1785 total points
T1.TG        86  1290 total points
ECN.TG       69  1035 total points
U1.TOS       20  1000 total points
T5.W         36   900 total points
T5.RD        38   760 total points
T4.R          7   700 total points
SEQ.ISR      23   575 total points
SEQ.SP       21   525 total points
ECN.O        34   510 total points
OPS.O1       22   440 total points
OPS.O3       21   420 total points
OPS.O2       20   400 total points
OPS.O4       19   380 total points
OPS.O5       18   360 total points
OPS.O6       16   320 total points
SEQ.TS        3   300 total points
T3.R          3   240 total points
ECN.W        15   225 total points
U1.RUCK       2   200 total points
T5.S         10   200 total points
SEQ.TI        2   200 total points
U1.RID        2   200 total points
T1.DF         8   160 total points
T5.DF         6   120 total points
U1.IPL        1   100 total points
T6.R          1   100 total points
U1.R          2   100 total points
WIN.W1        6    90 total points
IE.DFI        2    80 total points
WIN.W2        5    75 total points
SEQ.GCD       1    75 total points
T5.O          6    60 total points
WIN.W3        4    60 total points
WIN.W6        4    60 total points
WIN.W5        4    60 total points
WIN.W4        4    60 total points
T5.A          1    20 total points
ECN.DF        1    20 total points
Failed tests by common name
*.TG        633  9495 total points
*.R          35  3340 total points
OPS.O* *.O  156  2890 total points
*.TOSI       96  2400 total points
*.W          51  1125 total points
*.TOS        20  1000 total points
*.RD         38   760 total points
*.ISR        23   575 total points
*.SP         21   525 total points
WIN.W*       27   405 total points
*.TS          3   300 total points
*.DF         15   300 total points
*.S          10   200 total points
*.RUCK        2   200 total points
*.RID         2   200 total points
*.TI          2   200 total points
*.IPL         1   100 total points
*.DFI         2    80 total points
*.GCD         1    75 total points
*.A           1    20 total points

stats-random-os-10000-100508-ttlhack-2

This is with both observed and measured TG values normalized with get_initial_ttl_guess.

2008-10-07 18:04:10.322551
$Id: nmap-os-db 10440 2008-10-02 01:45:42Z david $
Number of fingerprints seen: 636
Number of diffs seen: 6193
Number of perfect/imperfect diffs: 5922/271
Number of diffs ignored for being below 90%: 100
Average diffs/print: 9.74
Number of prints with zero guesses: 14 (2.20%)
Number of prints with some guesses (none perfect): 371 (58.33%)
Number of unique perfect matches: 34 (5.35%)
*** Number of prints with 2 perfect matches: 24 (3.77%)
*** Number of prints with 3 perfect matches: 9 (1.42%)
*** Number of prints with 36 perfect matches: 146 (22.96%)
*** Number of prints with 6 perfect matches: 5 (0.79%)
*** Number of prints with 8 perfect matches: 3 (0.47%)
*** Number of prints with 11 perfect matches: 9 (1.42%)
*** Number of prints with 34 perfect matches: 3 (0.47%)
*** Number of prints with 14 perfect matches: 5 (0.79%)
*** Number of prints with 15 perfect matches: 1 (0.16%)
*** Number of prints with 21 perfect matches: 2 (0.31%)
*** Number of prints with 22 perfect matches: 3 (0.47%)
*** Number of prints with 4 perfect matches: 4 (0.63%)
*** Number of prints with 31 perfect matches: 3 (0.47%)
G=Y prints: 93 (14.62%)  Not G=Y prints: 543 (85.38%)
Average match percentage: 99.80
Average match percentage (non-perfect matches only): 95.52
Total T test mismatches: 0
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
ECN.R        23  2300 total points
IE.TOSI      89  2225 total points
T5.TG       118  1770 total points
U1.TG        77  1155 total points
U1.TOS       21  1050 total points
T5.W         36   900 total points
IE.TG        60   900 total points
T5.RD        38   760 total points
T4.R          7   700 total points
T1.TG        46   690 total points
SEQ.SP       23   575 total points
ECN.TG       37   555 total points
ECN.O        37   555 total points
SEQ.ISR      22   550 total points
OPS.O1       25   500 total points
OPS.O3       24   480 total points
OPS.O2       23   460 total points
OPS.O4       22   440 total points
OPS.O5       21   420 total points
OPS.O6       17   340 total points
U1.RUCK       3   300 total points
T3.R          3   240 total points
ECN.W        16   240 total points
T5.S         10   200 total points
SEQ.TI        2   200 total points
SEQ.TS        2   200 total points
U1.RID        2   200 total points
T1.DF         8   160 total points
T5.DF         6   120 total points
WIN.W1        7   105 total points
T1.R          1   100 total points
U1.IPL        1   100 total points
T6.R          1   100 total points
U1.R          2   100 total points
WIN.W2        6    90 total points
IE.DFI        2    80 total points
WIN.W3        5    75 total points
WIN.W6        5    75 total points
WIN.W5        5    75 total points
WIN.W4        5    75 total points
SEQ.GCD       1    75 total points
T5.O          6    60 total points
T5.A          1    20 total points
ECN.DF        1    20 total points
Failed tests by common name
*.TG        338  5070 total points
*.R          37  3540 total points
OPS.O* *.O  175  3255 total points
*.TOSI       89  2225 total points
*.W          52  1140 total points
*.TOS        21  1050 total points
*.RD         38   760 total points
*.SP         23   575 total points
*.ISR        22   550 total points
WIN.W*       33   495 total points
*.RUCK        3   300 total points
*.DF         15   300 total points
*.S          10   200 total points
*.TI          2   200 total points
*.RID         2   200 total points
*.TS          2   200 total points
*.IPL         1   100 total points
*.DFI         2    80 total points
*.GCD         1    75 total points
*.A           1    20 total points

stats-random-os-10000-100508-ttlhack-good

As above (changing observed T to TG), but excluding and prints that would not have been printed with --osscan-limit.

2008-10-07 20:05:51.785294
$Id: nmap-os-db 10436 2008-10-01 21:58:16Z david $
Number of fingerprints seen: 158
Number of diffs seen: 115
Number of perfect/imperfect diffs: 2/113
Number of diffs ignored for being below 90%: 33
Average diffs/print: 0.73
Number of prints with zero guesses: 10 (6.33%)
Number of prints with some guesses (none perfect): 146 (92.41%)
Number of unique perfect matches: 2 (1.27%)
G=Y prints: 5 (3.16%)  Not G=Y prints: 153 (96.84%)
Average match percentage: 94.50
Average match percentage (non-perfect matches only): 94.41
Total T test mismatches: 0
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
ECN.R        21  2100 total points
IE.TOSI      58  1450 total points
T5.TG        86  1290 total points
T1.TG        82  1230 total points
U1.TG        74  1110 total points
ECN.TG       67  1005 total points
U1.TOS       19   950 total points
IE.TG        62   930 total points
SEQ.SP       20   500 total points
SEQ.ISR      20   500 total points
ECN.O        27   405 total points
OPS.O1       20   400 total points
OPS.O3       18   360 total points
OPS.O2       18   360 total points
OPS.O5       16   320 total points
OPS.O4       16   320 total points
OPS.O6       13   260 total points
U1.RUCK       2   200 total points
SEQ.TI        2   200 total points
SEQ.TS        2   200 total points
U1.RID        2   200 total points
ECN.W        12   180 total points
T4.R          1   100 total points
T6.R          1   100 total points
WIN.W1        6    90 total points
T3.R          1    80 total points
IE.DFI        2    80 total points
WIN.W2        5    75 total points
SEQ.GCD       1    75 total points
T5.S          3    60 total points
WIN.W3        4    60 total points
WIN.W6        4    60 total points
WIN.W5        4    60 total points
WIN.W4        4    60 total points
T5.DF         2    40 total points
T5.W          1    25 total points
T5.A          1    20 total points
T5.RD         1    20 total points
ECN.DF        1    20 total points
T1.DF         1    20 total points
Failed tests by common name
*.TG        371  5565 total points
OPS.O* *.O  128  2425 total points
*.R          24  2380 total points
*.TOSI       58  1450 total points
*.TOS        19   950 total points
*.ISR        20   500 total points
*.SP         20   500 total points
WIN.W*       27   405 total points
*.W          13   205 total points
*.RUCK        2   200 total points
*.TI          2   200 total points
*.RID         2   200 total points
*.TS          2   200 total points
*.DFI         2    80 total points
*.DF          4    80 total points
*.GCD         1    75 total points
*.S           3    60 total points
*.RD          1    20 total points
*.A           1    20 total points

stats-random-os-10000-100508-ttlhack-2-good

As above (measured and reference TG coerced to guessed initial values), but excluding and prints that would not have been printed with --osscan-limit.

2008-10-07 20:26:40.711039
$Id: nmap-os-db 10440 2008-10-02 01:45:42Z david $
Number of fingerprints seen: 158
Number of diffs seen: 118
Number of perfect/imperfect diffs: 4/114
Number of diffs ignored for being below 90%: 30
Average diffs/print: 0.75
Number of prints with zero guesses: 10 (6.33%)
Number of prints with some guesses (none perfect): 144 (91.14%)
Number of unique perfect matches: 4 (2.53%)
G=Y prints: 5 (3.16%)  Not G=Y prints: 153 (96.84%)
Average match percentage: 95.13
Average match percentage (non-perfect matches only): 94.96
Total T test mismatches: 0
Failed fingermatch: 0
Failed fingerdiff: 0
Failed tests
ECN.R        22  2200 total points
IE.TOSI      60  1500 total points
U1.TOS       20  1000 total points
T5.TG        53   795 total points
U1.TG        45   675 total points
T1.TG        44   660 total points
SEQ.SP       22   550 total points
IE.TG        36   540 total points
ECN.TG       36   540 total points
SEQ.ISR      19   475 total points
OPS.O1       23   460 total points
ECN.O        30   450 total points
OPS.O3       21   420 total points
OPS.O2       21   420 total points
OPS.O5       19   380 total points
OPS.O4       19   380 total points
U1.RUCK       3   300 total points
OPS.O6       14   280 total points
SEQ.TI        2   200 total points
U1.RID        2   200 total points
ECN.W        13   195 total points
WIN.W1        7   105 total points
T1.R          1   100 total points
T4.R          1   100 total points
SEQ.TS        1   100 total points
T6.R          1   100 total points
WIN.W2        6    90 total points
T3.R          1    80 total points
IE.DFI        2    80 total points
WIN.W3        5    75 total points
WIN.W6        5    75 total points
WIN.W5        5    75 total points
WIN.W4        5    75 total points
SEQ.GCD       1    75 total points
T5.S          3    60 total points
T5.DF         2    40 total points
T5.W          1    25 total points
T5.A          1    20 total points
T5.RD         1    20 total points
ECN.DF        1    20 total points
T1.DF         1    20 total points
Failed tests by common name
*.TG        214  3210 total points
OPS.O* *.O  147  2790 total points
*.R          26  2580 total points
*.TOSI       60  1500 total points
*.TOS        20  1000 total points
*.SP         22   550 total points
WIN.W*       33   495 total points
*.ISR        19   475 total points
*.RUCK        3   300 total points
*.W          14   220 total points
*.TI          2   200 total points
*.RID         2   200 total points
*.TS          1   100 total points
*.DFI         2    80 total points
*.DF          4    80 total points
*.GCD         1    75 total points
*.S           3    60 total points
*.RD          1    20 total points
*.A           1    20 total points

User interface adjustments

Stats from random-os-10000-100508.nmap

      3  0% No OS matches for host (If you know
     29  5% No OS matches for host
     90 14% OS details
    110 17% Close OS guess (no submit)
    130 20% Too many fingerprints match this host
    274 43% No exact OS matches for host (test conditions non-ideal)

Ignoring 478 prints without an open and a closed TCP port: grep -B 10 -E '(|)' random-os-10000-100508.nmap | nmap-dev/os-grep.sh

      3  2% No OS matches for host (If you know
     13  8% No OS matches for host
      2  1% OS details
     23 15% Close OS guess (no submit)
    117 74% No exact OS matches for host (test conditions non-ideal)

Stats from random-os-ttl-10000-100608.nmap (expanded TTL ranges, same hosts)

      1  0% Close OS guess (submit)
      3  0% No OS matches for host (If you know
      6  1% No exact OS matches for host (If you know
     35  5% No OS matches for host
    119 18% Close OS guess (no submit)
    136 21% OS details
    149 23% Too many fingerprints match this host
    213 32% No exact OS matches for host (test conditions non-ideal)

Ignoring 500 prints without an open and a closed TCP port: grep -B 10 -E '(|)' random-os-ttl-10000-100608.nmap | nmap-dev/os-grep.sh

      1  1% Close OS guess (submit)
      3  2% No OS matches for host (If you know
      6  4% No exact OS matches for host (If you know
     19 12% No OS matches for host
     28 17% Close OS guess (no submit)
      4  2% OS details
    101 62% No exact OS matches for host (test conditions non-ideal)

Reference scan results

This table shows the results of the scanning known hosts with the nmap trunk and with the nmap-os branch on 10-13-2008. The highlighted columns show the difference in best match percentage between scanning with nmap and with nmap-os. All the matches were correct, except for a few marked entries. (Linux versions differing only in the micro number were considered correct.)

 goomba nmapgoomba nmap-oschangedavid nmapdavid nmap-oschangefyodorhome nmapfyodorhome nmap-oschangefyodorcolor nmapfyodorcolo nmap-oschange
down*------------------------
csico98%98%0%97%**97%0%***100%***100%0%***100%***100%0%
compy38693%95%+2%93%95%+2%93%96%+3%93%96%+3%
no-stats98%100%+2%95%96%+1%95%100%+5%96%100%+4%
regscan90%91%+1%90%92%+2%89%92%+3%89%93%+4%
stormtrooper91%93%+2%92%92%0%91%94%+3%****91%****95%+4%
goomba96%96%0%97%96%−1%93%93%0%99%99%0%
scanme99%99%0%98%98%0%100%100%0%missingmissing 
clem0%0%0%*****88%*****85%−3%0%0%0%0%0%0%
enigma******93%96%+3%94%95%+1%86%89%+3%94%97%+3%
 * This one seems to have gone down since Brandon gave it to me, so all matches were "Too many fingerprints."
** A wrong OS identification matched at 100%. *** There were multiple perfect matches. **** These had the wrong Linux minor version (2.4 instead of 2.6). ***** The guesses for clem were wrong. ****** enigma was wrongly identified as Solaris 10 (not 9) in every case.
Page last modified on October 31, 2008, at 05:41 PM