-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The name of the scanning application is "queso". By OS
fingerprinting I mean it is trying to determine what OS's you are
running. If you have used NMAP, I believe the OS fingerprinting code
in it (nmap -O host.domain.com) comes directly from "queso".
The may still have it at:
http://www.opensec.net
If not, do a search on "fingerprint AND queso". It will turn up. If
you want to know more about OS fingerprinting, read Fyodor's article
at:
www.insecure.org
This is the site that belongs to the person that wrote NMAP.
Carric Dooley
Network Security Consultant
"A little inaccuracy sometimes saves a ton of explanation. "
- - H. H. Munro (Saki) (1870-1916)
- -----Original Message-----
From: Javier Romero <[EMAIL PROTECTED]>
To: Carric Dooley <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED] <[EMAIL PROTECTED]>; [EMAIL PROTECTED]
<[EMAIL PROTECTED]>
Date: Friday, October 29, 1999 8:05 PM
Subject: Re: queso scan
>Hi Carric, Hi folks
>
>But, What is that app, whose fingerprinting is QUESO?
>Do you know it, Carric?
>
>
>BTW, talking about fingerprinting, Jim read this page:
>
> Distributed Metastasis : A Computer Network Penetration
> Methodology
> Andrew J. Stewart
> Consultant, The Packet Factory
> http://www.packetfactory.net
>
>Regards,
>
>Javier Romero
>
>Carric Dooley wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Queso is an OS fingerprinting app. Someone is trying to find out
>> what you are running on your network, and what the network looks
>> like.
>>
>> Carric Dooley
>> Network Security Consultant
>>
>> "A little inaccuracy sometimes saves a ton of explanation. "
>> - - H. H. Munro (Saki) (1870-1916)
>> - -----Original Message-----
>> From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
>> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
>> Date: Friday, October 29, 1999 5:15 PM
>> Subject: queso scan
>>
>> >
>> >
>> >Can anyone explain to me what someone would be trying to do with
>> >a queso scan?
>> >
>> >We have seen a couple of probes lately for it.
>> >
>> >Thanks,
>> >Jim Lemieux
>> >
>> >
>> >-
>> >[To unsubscribe, send mail to [EMAIL PROTECTED] with
>> >"unsubscribe firewalls" in the body of the message.]
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: PGPfreeware 6.5.1 for non-commercial use
>> <http://www.pgp.com>
>>
>> iQA/AwUBOBoUvuuEoPqp8SMeEQLOnwCeJVO7boKYrzB/e/E9mC+Jg4lAjZYAoO38
>> D6x9MyFvhMocRY3/0pMGovRt
>> =enGX
>> -----END PGP SIGNATURE-----
>>
>> -
>> [To unsubscribe, send mail to [EMAIL PROTECTED] with
>> "unsubscribe firewalls" in the body of the message.]
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com>
iQA/AwUBOB2+n+uEoPqp8SMeEQKsGACgv2euguKEj+ZGxxTmk8Hw/WdxQakAoOtV
Xc4hqogErvzNFSb7vrxcsfqL
=RnW0
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
