Wir werden das mit dem getroppten RST jetzt nicht klären können.
Aber gerade einen Host aus dem Log genommen, wie erklärst du das:
__________________________________________
Starting nmap 3.48 (
http://www.insecure.org/nmap/ ) at 2004-02-27 10:28 CET
Host chello212186018138.404.14.vie.surfer.at (212.186.18.138) appears to be up ... good.
Initiating Connect() Scan against chello212186018138.404.14.vie.surfer.at (212.186.18.138) at 10:28
Adding open port 135/tcp
The Connect() Scan took 0 seconds to scan 1 ports.
Interesting ports on chello212186018138.404.14.vie.surfer.at (212.186.18.138):
PORT STATE SERVICE
135/tcp open msrpc
Nmap run completed -- 1 IP address (1 host up) scanned in 0.453 seconds
g17@para:~>
_______________________________________
________________________________________
para:/home/g17 # nmap -sS -v -O -T4 212.186.18.138
Starting nmap 3.48 (
http://www.insecure.org/nmap/ ) at 2004-02-27 10:32 CET
Host chello212186018138.404.14.vie.surfer.at (212.186.18.138) appears to be up ... good.
Initiating SYN Stealth Scan against chello212186018138.404.14.vie.surfer.at (212.186.18.138) at 10:32
Adding open port 135/tcp
Adding open port 113/tcp
Adding open port 5000/tcp
Adding open port 1025/tcp
The SYN Stealth Scan took 32 seconds to scan 1657 ports.
For OSScan assuming that port 113 is open and port 1 is closed and neither are firewalled
WARNING: RST from port 113 -- is this port really open?
WARNING: RST from port 113 -- is this port really open?
WARNING: RST from port 113 -- is this port really open?
WARNING: RST from port 113 -- is this port really open?
WARNING: RST from port 113 -- is this port really open?
Insufficient responses for TCP sequencing (0), OS detection may be less accurate
Interesting ports on chello212186018138.404.14.vie.surfer.at (212.186.18.138):
(The 1635 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
53/tcp filtered domain
67/tcp filtered dhcpserver
69/tcp filtered tftp
111/tcp filtered rpcbind
113/tcp open auth
135/tcp open msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
161/tcp filtered snmp
162/tcp filtered snmptrap
201/tcp filtered at-rtmp
202/tcp filtered at-nbp
203/tcp filtered at-3
204/tcp filtered at-echo
205/tcp filtered at-5
206/tcp filtered at-zis
207/tcp filtered at-7
208/tcp filtered at-8
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
Nmap run completed -- 1 IP address (1 host up) scanned in 34.983 seconds
__________________________________________
Host sollte noch up sein
g17