niXforums Forum Index
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   PreferencesPreferences   Log in to check your private messagesLog in to check your private messages   Log inLog in 
·  nixdoc.net ·  man pages ·  Linux HOWTOs ·  FreeBSD Tips ·  Forums
navigation Forum index » *nix » BSD » NetBSD
os fingerprint
Post new topic   Reply to topic Page 1 of 1 [7 Posts] View previous topic :: View next topic
Author Message
Mr K
*nix forums beginner


Joined: 08 Mar 2005
Posts: 9

PostPosted: Sat Jul 15, 2006 4:34 am    Post subject: Re: os fingerprint Reply with quote

Fixed..!!!!!, you are not going to believe this, but I replace the router
with my old one and presto, everything is working ok now...... can't believe
but it's true., anyway I'am planning to move away from Netgear to another
brand or maybe make a router myself using PF..

Thanks again for your time and sorry if I drove you crazy but I was in a
worst condition Smile.


Mr K




"Moe Trin" <ibuprofin@painkiller.example.tld> escribió en el mensaje
news:slrnebgdot.uhd.ibuprofin@compton.phx.az.us...
Quote:
On Thu, 13 Jul 2006, in the Usenet newsgroup comp.unix.bsd.netbsd.misc, in
article <%hEtg.12053$6w.9618@fed1read11>, Mr K wrote:

aSmile I have a domain xxx.no-ip.com pointing to my Qube on port 85, when I
request the site (internet), nothing happend, same thing with ftp.

How are you testing this? What is the exact error message? Run a
packet sniffer on your testing system, and see what the packets say.
Run a packet trace from your test site to the NetBSD boxes using
'tcptraceroute' or 'hping2' (the original LBL traceroute runs on UDP, and
UDP is handled differently than TCP). Don't bother wasting your time
running windcrap TRACERT - that's using pings which are even more useless
than UDP. The only thing it might identify is a DNS error, which you
could check by simply using ping itself. Ping not working once it
identifies the correct IP number is meaningless, as many firewalls are
set to block pings.

bSmile When I point the domain to a pc (running NetBSD i386), again nothing
happend, same thing with ftp.

As above. "Nothing happened." Great, what did you do? Click on some icon
and hope that _something_ is going to happen? Find a real command line
telnet client, and attempt to connect to the remote host. What error does
it report. On the i386, install a packet sniffer and see what packets came
in/out.

cSmile When I point the domain to a pc with Windows 2000 running xampp,
success
I can see my page and use the ftp server.

Again, run the packet sniffer and compare the packets. Is XAMPP running
on
port 85 as well?

I know that something have to be related with my wyse idea to install
msql3
into my Qube but to be honest I have no idea what is the problem,

What error messages? What is in the packets?

I try with another netbsd machine and I have the same result, that why
I'am
pointing to my ISP and to the OS Fingerprint.

And you have no idea how many CPU cycles it would take to run an O/S
fingerprinting tool on every router. No ISP (especially one as loose as
Cox) is going to waste CPU cycles on that when they don't even bother
filtering per RFC2827. But if you are so sure that the problem is the
ISP fingerprinting, set your TCP Window size to 32767, 40320, 64512, or
65535, set your TTL to 128, and disable the Timestamp option. And after
you do that, and it _still_ doesn't work, maybe you'll start packet
sniffing and find the real reason.

Old guy
Back to top
Moe Trin
*nix forums Guru


Joined: 20 Feb 2005
Posts: 972

PostPosted: Sat Jul 15, 2006 12:30 am    Post subject: Re: os fingerprint Reply with quote

On Thu, 13 Jul 2006, in the Usenet newsgroup comp.unix.bsd.netbsd.misc, in
article <%hEtg.12053$6w.9618@fed1read11>, Mr K wrote:

Quote:
aSmile I have a domain xxx.no-ip.com pointing to my Qube on port 85, when I
request the site (internet), nothing happend, same thing with ftp.

How are you testing this? What is the exact error message? Run a
packet sniffer on your testing system, and see what the packets say.
Run a packet trace from your test site to the NetBSD boxes using
'tcptraceroute' or 'hping2' (the original LBL traceroute runs on UDP, and
UDP is handled differently than TCP). Don't bother wasting your time
running windcrap TRACERT - that's using pings which are even more useless
than UDP. The only thing it might identify is a DNS error, which you
could check by simply using ping itself. Ping not working once it
identifies the correct IP number is meaningless, as many firewalls are
set to block pings.

Quote:
bSmile When I point the domain to a pc (running NetBSD i386), again nothing
happend, same thing with ftp.

As above. "Nothing happened." Great, what did you do? Click on some icon
and hope that _something_ is going to happen? Find a real command line
telnet client, and attempt to connect to the remote host. What error does
it report. On the i386, install a packet sniffer and see what packets came
in/out.

Quote:
cSmile When I point the domain to a pc with Windows 2000 running xampp, success
I can see my page and use the ftp server.

Again, run the packet sniffer and compare the packets. Is XAMPP running on
port 85 as well?

Quote:
I know that something have to be related with my wyse idea to install msql3
into my Qube but to be honest I have no idea what is the problem,

What error messages? What is in the packets?

Quote:
I try with another netbsd machine and I have the same result, that why I'am
pointing to my ISP and to the OS Fingerprint.

And you have no idea how many CPU cycles it would take to run an O/S
fingerprinting tool on every router. No ISP (especially one as loose as
Cox) is going to waste CPU cycles on that when they don't even bother
filtering per RFC2827. But if you are so sure that the problem is the
ISP fingerprinting, set your TCP Window size to 32767, 40320, 64512, or
65535, set your TTL to 128, and disable the Timestamp option. And after
you do that, and it _still_ doesn't work, maybe you'll start packet
sniffing and find the real reason.

Old guy
Back to top
Mr K
*nix forums beginner


Joined: 08 Mar 2005
Posts: 9

PostPosted: Fri Jul 14, 2006 3:35 am    Post subject: Re: os fingerprint Reply with quote

Hi:

The reason because I'am pointing to os fingerprint is because:

aSmile I have a domain xxx.no-ip.com pointing to my Qube on port 85, when I
request the site (internet), nothing happend, same thing with ftp.
bSmile When I point the domain to a pc (running NetBSD i386), again nothing
happend, same thing with ftp.
cSmile When I point the domain to a pc with Windows 2000 running xampp, success
I can see my page and use the ftp server.

I know that something have to be related with my wyse idea to install msql3
into my Qube but to be honest I have no idea what is the problem, I try with
another netbsd machine and I have the same result, that why I'am pointing to
my ISP and to the OS Fingerprint.

Somebody have had the same problem, How it can be fixed??.

Thanks.


Mr K




"Moe Trin" <ibuprofin@painkiller.example.tld> escribió en el mensaje
news:slrneb8k3d.9p4.ibuprofin@compton.phx.az.us...
Quote:
On Mon, 10 Jul 2006, in the Usenet newsgroup comp.unix.bsd.netbsd.misc, in
article <WmHsg.11958$6w.8521@fed1read11>, Mr K wrote:

Have somebody tried to change the OS fingerprint of a NetBSD machine to
make
it look like a Windows or Mac machine to the eyes of an ISP, any usefull
link with information about how to do it.

Well, the window size needs to change, as does the default TTL and
perhaps the one or two of the IP options, but why do you think the ISP
gives a flying fsck what operating system you are running? Oh, and
which
version of wincrap? Which version of what-ever on the Mac? Microsoft
can't
figure out how to be consistent in stack design, and Mac/OS 7 to 9 is very
different from OS/X. You probably would want to look at Fyodor's (author
of nmap) paper on O/S fingerprints or Michal Zalewski's work on the p0f
passive fingerprint tool. Google is your friend - search terms 'os
fingerprinting' should turn up more than enough material to keep you
occupied for a week or two.

On Tue, 11 Jul 2006, in article <9TSsg.11967$6w.2423@fed1read11>, you
added:

After I reinstall my Qube 2 with perl, lighttpd, php, samba, pureftpd, I
decide to install sql, for that I install msql3 and link it with php who
was
working together with lighttpd as fast-cgi.

Your description is quite lacking in details, but OK, you changed
something
apparently on a web server setup. As you may know, the Internet consists
of
a lot of other things besides the web. Can you at least attempt to connect
to any other service - ftp, smtp, telnet - I don't care - the main point
is do you have connectivity, or is your network setup hosed? For example,
if you try to connect to a non-existent telnet server on the box, do you
at least get a "Connection closed by foreign host" message?

My problem now is that I have no way to make the Qube work with my dynamic
dns service, what happen is, every time I request the web site thru my
DDNS
nothing happen, not event direct thru IP address, but when I point my DDNS
to a machine running Windows 2000 Pro with Xampp everything works like it
use to work before my wyse idea (msql3).

I really have no idea what you've done, but this is some configuration
error on your system, and has nothing to do with the ISP.

Thats why I'am thinking that some how my ISP (Cox) is denying access to my
machine running NetBSD (OS Fingerprint).

Believe me, that have a LOT more things to do than worry about the O/S you
are trying to run.

Old guy
Back to top
Moe Trin
*nix forums Guru


Joined: 20 Feb 2005
Posts: 972

PostPosted: Wed Jul 12, 2006 1:29 am    Post subject: Re: os fingerprint Reply with quote

On Mon, 10 Jul 2006, in the Usenet newsgroup comp.unix.bsd.netbsd.misc, in
article <WmHsg.11958$6w.8521@fed1read11>, Mr K wrote:

Quote:
Have somebody tried to change the OS fingerprint of a NetBSD machine to make
it look like a Windows or Mac machine to the eyes of an ISP, any usefull
link with information about how to do it.

Well, the window size needs to change, as does the default TTL and
perhaps the one or two of the IP options, but why do you think the ISP
gives a flying fsck what operating system you are running? Oh, and which
version of wincrap? Which version of what-ever on the Mac? Microsoft can't
figure out how to be consistent in stack design, and Mac/OS 7 to 9 is very
different from OS/X. You probably would want to look at Fyodor's (author
of nmap) paper on O/S fingerprints or Michal Zalewski's work on the p0f
passive fingerprint tool. Google is your friend - search terms 'os
fingerprinting' should turn up more than enough material to keep you
occupied for a week or two.

On Tue, 11 Jul 2006, in article <9TSsg.11967$6w.2423@fed1read11>, you added:

Quote:
After I reinstall my Qube 2 with perl, lighttpd, php, samba, pureftpd, I
decide to install sql, for that I install msql3 and link it with php who was
working together with lighttpd as fast-cgi.

Your description is quite lacking in details, but OK, you changed something
apparently on a web server setup. As you may know, the Internet consists of
a lot of other things besides the web. Can you at least attempt to connect
to any other service - ftp, smtp, telnet - I don't care - the main point
is do you have connectivity, or is your network setup hosed? For example,
if you try to connect to a non-existent telnet server on the box, do you
at least get a "Connection closed by foreign host" message?

Quote:
My problem now is that I have no way to make the Qube work with my dynamic
dns service, what happen is, every time I request the web site thru my DDNS
nothing happen, not event direct thru IP address, but when I point my DDNS
to a machine running Windows 2000 Pro with Xampp everything works like it
use to work before my wyse idea (msql3).

I really have no idea what you've done, but this is some configuration
error on your system, and has nothing to do with the ISP.

Quote:
Thats why I'am thinking that some how my ISP (Cox) is denying access to my
machine running NetBSD (OS Fingerprint).

Believe me, that have a LOT more things to do than worry about the O/S you
are trying to run.

Old guy
Back to top
Mr K
*nix forums beginner


Joined: 08 Mar 2005
Posts: 9

PostPosted: Tue Jul 11, 2006 7:21 pm    Post subject: Re: os fingerprint Reply with quote

Very interesting, I'am trying to fix a problem that I dont know if its
related to fingerprint but I have no other clue, my problem is this:

After I reinstall my Qube 2 with perl, lighttpd, php, samba, pureftpd, I
decide to install sql, for that I install msql3 and link it with php who was
working together with lighttpd as fast-cgi.

My problem now is that I have no way to make the Qube work with my dynamic
dns service, what happen is, every time I request the web site thru my DDNS
nothing happen, not event direct thru IP address, but when I point my DDNS
to a machine running Windows 2000 Pro with Xampp everything works like it
use to work before my wyse idea (msql3).

Thats why I'am thinking that some how my ISP (Cox) is denying access to my
machine running NetBSD (OS Fingerprint).

Well I'll continue searching to see if I can fix this problem or if somebody
have other idea any help is welcome. thanks.


Mr K




"Mr K" <cals50@hotmail.com> escribió en el mensaje
news:WmHsg.11958$6w.8521@fed1read11...
Quote:
Hi:

Have somebody tried to change the OS fingerprint of a NetBSD machine to
make it look like a Windows or Mac machine to the eyes of an ISP, any
usefull link with information about how to do it.

Thanks.


Mr K

Back to top
Karsten Kruse
*nix forums beginner


Joined: 22 Feb 2005
Posts: 21

PostPosted: Tue Jul 11, 2006 9:52 am    Post subject: Re: os fingerprint Reply with quote

Mr K wrote:

Quote:
Have somebody tried to change the OS fingerprint of a NetBSD machine to make
it look like a Windows or Mac machine to the eyes of an ISP, any usefull
link with information about how to do it.

My NetBSD-Box (netbsd-3/386) looks like HP-UX:

http://uptime.netcraft.com/up/graph?site=tecneeq.dyndns.org

But i haven't changed anything.

Karsten Kruse

--
www.tecneeq.de www.newbie-net.de blog.onetbsd.de
()
<\/> GPL-guy: "Argh, they used my code! :-/"
_/\_ BSD-guy: "Cool, they used my code! Smile"
Back to top
Mr K
*nix forums beginner


Joined: 08 Mar 2005
Posts: 9

PostPosted: Tue Jul 11, 2006 6:16 am    Post subject: os fingerprint Reply with quote

Hi:

Have somebody tried to change the OS fingerprint of a NetBSD machine to make
it look like a Windows or Mac machine to the eyes of an ISP, any usefull
link with information about how to do it.

Thanks.


Mr K
Back to top
Google

Back to top
Display posts from previous:   
Post new topic   Reply to topic Page 1 of 1 [7 Posts] View previous topic :: View next topic
The time now is Sat Nov 22, 2008 5:09 am | All times are GMT
navigation Forum index » *nix » BSD » NetBSD
Jump to:  

Similar Topics
Topic Author Forum Replies Last Post
No new posts OS Fingerprint Email Kelley Reynolds Exim 5 Sat Jun 17, 2006 11:18 pm
No new posts to generate a fingerprint of all exe files present on my ... pradeep C++ 5 Sat Apr 15, 2006 7:13 am
No new posts Calculating a hash / fingerprint for a row / tuple Randall Lucas PostgreSQL 1 Tue Apr 11, 2006 2:54 am
No new posts Using MD5 fingerprint based relaying with Evolution Franck Routier Postfix 0 Thu Jan 05, 2006 9:52 am
No new posts Linux Fingerprint Verification Silvan embedded 0 Mon Dec 05, 2005 6:56 am

Latest Hollywood Gossip | Stag Weekend Nottingham | Mortgage Calculator | Car Loans | Mortgage Calculator
Copyright © 2004-2005 DeniX Solutions SRL
 
Other DeniX Solutions sites: Unix/Linux blog |  electronics forum |  medicine forum |  science forum | 
Privacy Policy


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.2194s ][ Queries: 20 (0.0993s) ][ GZIP on - Debug on ]