xeno:~# nmap -sV 10.99.1.2 -F -T Insane -O -S 10.99.1.1
WARNING:  If -S is being used to fake your source address, you may also have touse -e <iface> and -P0 .  If you are using it to specify your real source address, you can ignore this warning.

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-08-18 22:19 CEST
Warning: Giving up on some ports due to excessive retransmissions
Interesting ports on 10.99.1.2:
(The 1090 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE           VERSION
21/tcp    open     ftp               Solaris ftpd
23/tcp    open     telnet            BSD-derived telnetd
27/tcp    filtered nsw-fe
31/tcp    filtered msg-auth
39/tcp    filtered rlp
48/tcp    filtered auditd
50/tcp    filtered re-mail-ck
52/tcp    filtered xns-time
58/tcp    filtered xns-mail
64/tcp    filtered covia
79/tcp    open     finger            Sun Solaris fingerd
94/tcp    filtered objcall
102/tcp   filtered iso-tsap
111/tcp   open     rpcbind           2-4 (rpc #100000)
114/tcp   filtered audionews
118/tcp   filtered sqlserv
131/tcp   filtered cisco-tna
142/tcp   filtered bl-idm
143/tcp   filtered imap
154/tcp   filtered netsc-prod
179/tcp   filtered bgp
182/tcp   filtered audit
196/tcp   filtered dn6-smm-red
218/tcp   filtered mpp
261/tcp   filtered nsiiops
262/tcp   filtered arcisdms
313/tcp   filtered magenta-logic
360/tcp   filtered scoi2odialog
376/tcp   filtered nip
406/tcp   filtered imsp
416/tcp   filtered silverplatter
424/tcp   filtered opc-job-track
429/tcp   filtered ocs_amu
458/tcp   filtered appleqtc
463/tcp   filtered alpes
464/tcp   filtered kpasswd5
465/tcp   filtered smtps
471/tcp   filtered mondex
475/tcp   filtered tcpnethaspsrv
479/tcp   filtered iafserver
487/tcp   filtered saft
513/tcp   open     rlogin
514/tcp   open     shell?
523/tcp   filtered ibm-db2
535/tcp   filtered iiop
555/tcp   filtered dsf
579/tcp   filtered decbsrv
595/tcp   filtered cab-protocol
606/tcp   filtered urm
660/tcp   filtered mac-srvr-admin
754/tcp   filtered krb_prop
769/tcp   filtered vid
773/tcp   filtered submit
786/tcp   filtered concert
808/tcp   filtered ccproxy-http
998/tcp   filtered busboy
1027/tcp  filtered IIS
1029/tcp  filtered ms-lsa
1337/tcp  filtered waste
1365/tcp  filtered adapt-sna
1366/tcp  filtered netware-csp
1381/tcp  filtered apple-licman
1387/tcp  filtered cadsi-lm
1395/tcp  filtered iclpv-wsm
1402/tcp  filtered prm-sm-np
1408/tcp  filtered sophia-lm
1412/tcp  filtered innosys
1419/tcp  filtered timbuktu-srv3
1421/tcp  filtered gandalf-lm
1449/tcp  filtered peport
1453/tcp  filtered genie-lm
1460/tcp  filtered proshare2
1467/tcp  filtered csdmbase
1470/tcp  filtered uaiact
1480/tcp  filtered pacerforum
1493/tcp  filtered netmap_lm
1510/tcp  filtered mvx-lm
1513/tcp  filtered fujitsu-dtc
1518/tcp  filtered vpvd
1664/tcp  filtered netview-aix-4
1667/tcp  filtered netview-aix-7
1670/tcp  filtered netview-aix-10
1720/tcp  filtered H.323/Q.931
1984/tcp  filtered bigbrother
1995/tcp  filtered perf-port
2008/tcp  filtered conf
2015/tcp  filtered cypress
2019/tcp  filtered whosockami
2033/tcp  filtered glogger
2043/tcp  filtered isis-bcast
2046/tcp  filtered sdfunc
2068/tcp  filtered advocentkvm
2111/tcp  filtered kx
2430/tcp  filtered venus
3005/tcp  filtered deslogin
3264/tcp  filtered ccmail
3455/tcp  filtered prsvp
3531/tcp  filtered peerenabler
3689/tcp  filtered rendezvous
3984/tcp  filtered mapper-nodemgr
4045/tcp  open     rpc
4133/tcp  filtered nuts_bootp
4343/tcp  filtered unicall
5190/tcp  filtered aol
5232/tcp  filtered sgi-dgl
5631/tcp  filtered pcanywheredata
5632/tcp  filtered pcanywherestat
5998/tcp  filtered ncd-diag
6112/tcp  filtered dtspc
6400/tcp  filtered crystalreports
6401/tcp  filtered crystalenterprise
6502/tcp  filtered netop-rc
6544/tcp  filtered mythtv
7003/tcp  filtered afs3-vlserver
7008/tcp  filtered afs3-update
7009/tcp  filtered afs3-rmtsys
8007/tcp  filtered ajp12
8081/tcp  filtered blackice-icecap
8082/tcp  filtered blackice-alerts
9100/tcp  filtered jetdirect
10083/tcp filtered amidxtape
17007/tcp filtered isode-dua
18184/tcp filtered opsec_lea
27010/tcp filtered flexlm10
32771/tcp open     status            1 (rpc #100024)
32772/tcp open     rpc.unknown
32773/tcp open     metad             1-2 (rpc #100229)
32774/tcp open     rpc.metamedd      1 (rpc #100242)
32775/tcp open     metamhd           1 (rpc #100230)
32776/tcp open     rusersd           2-3 (rpc #100002)
65301/tcp filtered pcanywhere
MAC Address: 00:01:02:FA:2D:AC (3com)
Device type: general purpose
Running: Sun Solaris 9
OS details: Sun Solaris 9
Uptime 0.035 days (since Thu Aug 18 21:32:00 2005)

Nmap finished: 1 IP address (1 host up) scanned in 121.719 seconds