Sophie: nessus-1.1.13-1mdk i586

nessus-1.1.13-1mdk.i586.rpm

;-----------------------------------------------------------
; queso.conf			     by savage@apostols.org
;-----------------------------------------------------------
; CVS: $Id: queso.conf,v 1.1 1999/07/28 21:31:48 renaud Exp $
;-----------------------------------------------------------
; Paket Format:
;
; n s a w f	
;		n -> 0..5       -> paket # (in response to S,SA,F,FA,SF,P)
;		s -> 0 1 -      -> containz seq (1=yes,0=no,-=no reply)
;		a -> 0 1 - +x R -> containz ack
;		w -> 0 1 x -    -> window ( 0=no, 1=si, x=hex_value )
;		f -> SRAFPXYU   -> SYN RST ACK FIN PSH XXX YYY URGENT-ptr
;
;-----------------------------------------------------------
	
* Dead Host, Firewalled Port or Unassigned IP
0 - - - -
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 - - - -

*- Not Listen, try another port
0 0 1 0 RA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA

* Not Listen, DTC Hewlett Packard LAN Driver
0 1 1 0 RA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 0 RA
5 0 1 0 RA
6 1 1 0 RA

* Not Listen, USR/3COM Netserver
0 0 1 0 URA
1 0 0 0 UR
2 0 1 0 URA
3 0 0 0 UR
4 0 1 0 URA

* Not Listen, Windoze 95/98/NT
0 0 +1 0 RA
1 0 +1 0 R
2 0 +1 0 RA
3 0 +1 0 R
4 0 +2 0 RA
5 0 +0 0 RA

* Not Listen, Windoze 95/98/NT (sleeped)
0 - - - -
1 0 +1 0 R
2 0 +1 0 RA
3 0 +1 0 R
4 0 +2 0 RA
5 0 +0 0 RA

* Not Listen HP/JETdirect  
0 0 1 0 RA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 0 1 0 RA

* Not Listen IGEL Etherminal 2C (by wh@hillerzentri.de)
0 0 1 0 R
1 0 0 0 R
2 0 1 0 R
3 0 0 0 R
4 0 1 0 R
5 0 1 0 R

* Not Listen Wollongong DOS TCP/IP, 3COM Office/Switch  
0 0 1 0 RPA
1 0 1 0 RPA
2 0 1 0 RPA
3 0 1 0 RPA
4 0 1 0 RPA

* Not Listen (SCO/Unix)  
0 0 1 1 RA
1 0 0 1 R

*- Not Listen Unknown (may be loss of pkts) ?  
0 0 1 0 RA

*- Firewall drops SYN pakets.  
0 - - - -
1 0 0 0 R
3 0 0 0 R
4 - - - -
6 - - - -

*- Firewalled Solaris 2.x
0 1 1 2398 SA
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - - 

*- Firewalled host/port or network congestion  
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - - 

*- Firewalled host/port or network congestion  
0 - - - -

* Linux 2.0.35 to 2.0.9999 :)
0 1 1 7FE0 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7FE0 SFA
5 - - - - 
6 1 1 7FE0 SA

*- Linux 2.0.xx -sendmail??-
0 1 1 7FE0 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA
5 0 1 0 RA
6 0 1 0 RA

* Linux 1.2.xx 
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SFA
5 - - - - 
6 1 1 1 SA

* Linux 1.3.xx, 2.0.0 to 2.0.34  
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SFA
5 - - - - 
6 1 1 1 SAXY

* Linux 2.1.xx or 2.2.xx
0 1 1 7E4C SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7E4C SA
5 - - - -
6 1 1 7E4C SA

* Linux 2.1.xx or 2.2.xx
0 1 1 7FB8 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7FB8 SA
5 - - - -
6 1 1 7FB8 SA

* MacOS-8 (or unusual Solaris)  
0 1 1 4518 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 4518 SA
5 - - - -

* MacTCP
0 1 1 2D25 SA
1 0 0 1234 R
3 0 0 1234 R
4 1 1 0 A

* Solaris 2.x
0 1 1 2398 SA
1 0 0 0 R
2 - - - -

* Solaris 2.x
0 1 1 2238 SA
1 0 0 0 R
2 - - - -

* Solaris 2.x firewalled (like www.apple.com)
0 1 1 2398 SA
1 - - - -
2 0 1 1234 RA
3 0 0 1234 R
4 1 1 2398 SA
5 0 1 1234 RA

* NetBSD 1.3.x, FreeBSD 3.x
0 1 1 4000 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 4000 SA
5 - - - -

* Standard: Solaris 2.x, Linux 2.1.???, Linux 2.2, MacOS
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SA
5 - - - -

* HP/JETdirect Printer  
0 1 1 1 SA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 0 1 0 RA

* HP/JETdirect Printer (old model)
0 1 1 1 SA
1 0 1 0 RA
2 - - - - 
3 0 1 0 RA
4 1 1 1 SA
5 - - - -

* Berkeley: HP/JETdirect Printer (by jay@gnu.org)  
0 1 1 16D0 SA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 1 1 16D0 SA
5 - - - -

* Berkeley: VAX/VMS, OpenVMS AXP 
0 1 1 0BB8 SA
1 0 0 0BB8 R
2 - - - -
3 0 0 0BB8 R
4 1 1 0BB8 A
5 - - - -

* Berkeley: VAX/VMS (by bem@cmc.net)
0 1 1 1800 SA
1 0 0 1800 R
2 - - - -
3 0 0 1800 R
4 1 1 1800 A
5 - - - -

* Berkeley: DECserver (terminal server).  
0 1 1 600 SA
1 0 0 600 R
2 - - - -
3 0 0 600 R
4 1 1 600 A
5 - - - -

* Berkeley: HP-UX B.10.20
0 1 1 8000 SA
1 0 0 8000 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 8000 A
5 0 1 0 RA

* Berkeley: usually Digital Unix, OSF/1 V3.0, HP-UX 10.x
0 1 1 8000 SA
1 0 0 8000 R
2 - - - -
3 0 0 8000 R
4 1 1 8000 A
5 - - - -

* Berkeley: DG/UX 5.4R3 (by biafra@pulhas.org) 
0 1 1 2238 SA
1 0 0 2238 R
2 - - - -
3 0 0 2238 R
4 1 1 2234 A
5 - - - -

* Berkeley: usually SunOS 4.x, NexT, Annex
0 1 1 1000 SA
1 0 0 1000 R
2 - - - -
3 0 0 1000 R
4 1 1 1000 A
5 - - - -

* Berkeley: usually HP/UX 9.x, OS/2 Warp 4 Merlin (fix#6), VxWorks 5.3
0 1 1 2000 SA
1 0 0 2000 R
2 - - - -
3 0 0 2000 R
4 1 1 2000 A
5 - - - -

* Berkeley: IRIX 5.x
0 1 1 F000 SA
1 0 0 F000 R
2 - - - -
3 0 0 F000 R
4 1 1 F000 A
5 - - - -

* Berkeley: Digital, HPUX, SunOs4, AIX3, OS/2 WARP-4, others...  
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 A
5 - - - -

* Windoze NT firewalled (like *.microsoft.com) 
0 1 1 2180 SA
1 0 R 0 R
2 0 1 0 RA
3 0 R 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Windoze NT firewalled (like www.compaq.com)
0 1 +1 2180 SA
1 - - - - 
2 0 +0 1234 RA
3 0 0 1234 R
4 1 +1 2180 SA
5 0 +0 1234 RA

* Windoze NT firewalled (like www.compaq.com)
0 1 +1 2180 SA
1 0 R 0 R
2 0 +0 1234 RA
3 0 0 1234 R
4 1 +1 2180 SA
5 0 +0 1234 RA

* Windoze 95/98/NT 
0 1 1 2180 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Windoze NT with RaptorFirewall (by stuart@ins.com) 
0 1 1 2180 SA
1 0 1 0 R
2 - - - -
3 0 1 0 R
4 1 1 2180 SA
5 - - - -

* Wollongong TCP/IP for MSDOS  
0 1 1 1 SPA
1 0 1 0 RPA
2 0 1 0 RPA
3 0 1 0 RPA
4 0 1 0 SPA

* IBM AIX 4   
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 1 1 1 SA 

* IBM AIX 4
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 1 1 1 SA 

* Plan9, CISCO-IOS 11.2(8)  
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 SA
5 1 1 0 RA

* CISCO-IOS 11.0  
0 1 1 1 SA
1 - - - -
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA

* Cisco IOS 11.0 syn.flooded  
0 - - - -
1 - - - -
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA

* 3COM Office Connect Switch  
0 1 1 1 SA
1 0 1 0 RAP
2 0 1 0 RAP
3 0 1 0 RAP
4 1 1 1 SA
5 0 1 0 RAP

* 3COM Netbuilder (by wait_man@linux.apostols.org)
0 1 1 1 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 1 1 1 SA

* SCO/Unix like www.sco.com 
0 1 1 1 SA
1 - - - -
2 0 1 1234 RA
3 0 0 1234 R
4 1 1 0FFC A
5 0 1 1234 RA

* SCO/Unix or SCO/Openserver
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0FFC A
5 - - - -

* Novell Netware TCP/IP  
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 - - - -
4 1 1 1 SA
5 - - - -

* FreeBSD 
0 1 1 4350 SA
1 0 0 4000 R
2 - - - -
3 0 0 4000 R
4 1 1 4350 SA
5 - - - -

* FreeBSD, NetBSD, OpenBSD  
0 1 1 4000 SA
1 0 0 4000 R
2 - - - -
3 0 0 4000 R
4 1 1 4000 SA
5 - - - -

* ClamIP Nautica Router by Bay Networks
0 1 1 0800 SA
1 - - - -
2 - - - -
3 - - - -
4 1 1 0800 SA
5 - - - -
6 1 1 0800 SA

* Reliant Unix from Siemens-Nixdorf
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 1 1 1 SA
5 - - - -
6 1 1 1 SA

* IRIX 6.x?  
0 1 1 F000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 F000 A
5 0 1 0 RA

* IRIX 6.x  
0 1 1 C000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 C000 A
5 0 1 0 RA

* BSDi 3.0, IBM S/390
0 1 1 2000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 2000 SA
5 0 1 0 RA

* BSDi or IRIX  
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 A
5 0 1 0 RA


* Digital VMS 5x/6x or Ultrix
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 RA
5 - - - - 

* CISCO-IGS (by joaop@promisc.net)
0 1 1 0 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA

* IBM 8237 Hub model 2 (by pmsac@toxyn.org)
0 1 1 1 SA
1 1 1 1 SA
2 - - - -
3 - - - -
4 1 1 1 SA

* Minix v.??? (by eepr0m@toxyn.org)
0 1 1 1 RA
1 0 1 1 R
2 - - - -
3 - - - -
4 1 1 1 RA

* NotListen Livingston PortMaster (by eepr0m@toxyn.org)
0 - - - -
1 - - - -
2 - - - -
3 - - - -
4 0 1 0 RA

* Livingston PortMaster ComOS 3.5L (by eepr0m@toxyn.org)
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 0 1 0 RA

* HP/3000 DTC (VTLS TCP/IP frontend)
0 1 1 03CA SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 03CA SA
5 0 1 0 RA

* Cisco 11.2(11)P
0 1 +1 1 SA
1 0 0 0 R
2 0 +0 0 RA
3 0 0 0 R
4 1 +1 1 SA
5 0 +24 0 RA

* WindowsNT, Cisco 11.2(10a), HP/3000 DTC, BayStack Switch
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 SA
5 0 1 0 RA

* USR/3COM Netserver. 
0 1 1 1 SA
1 0 0 0 UR
2 0 1 0 URA
3 0 0 0 UR
4 1 1 1 SA
5 0 1 0 URA

* Livingston Portmaster (by bem@cmc.net)
0 1 1 0800 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Windoze with Firewall ?
0 1 1 1 SA
1 0 1 0 R
2 0 1 1 RAF
3 0 1 1 RAF
4 1 1 1 SA
5 0 1 1 RAP

* Chamaleon TCP/IP 4 Windoze (by fermin@eup.udl.es)
0 1 1 2180 SA
1 0 1 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Cyclades PathRAS (by Cyril.Chaboisseau@obs.coe.int)
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA

* Sinix (by adulau@befree.be)
0 1 1 7FFF SA
1 0 0 0 R
2 - - - - 
3 0 0 0 R
4 1 1 7FFF A
5 - - - -

* Novell Netware 5.0 (by rzm@icm.edu.pl) 
0 1 1 FFFF SA
1 0 0 0 R
2 - - - -
3 - - - - 
4 1 1 FFFE SA
5 - - - -

* IBM AS/400 
0 1 1 2000 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 - - - -
5 0 1 0 RA

* Novell TCP/IP - DOS LanWorkPlace 4.12 (by adulau@befree.be)
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 0 0 R
4 - - - - 
5 0 1 0 RA
6 - - - -

* IBM XStation 1x0 (by Stefan.Eilemann@dlr.de)
0 0 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 A
5 - - - -
6 1 1 1 SA

* Vircom Major TCP/IP (by leighk@cybercomm.net)
0 1 1 0800 SA
1 1 1 0800 SA
2 0 1 0 R
3 - - - -
4 1 1 0800 SA
5 - - - -

* Computone Intelliserver (by leighk@cybercomm.net)
0 1 1 0400 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0400 A
5 - - - -

* Specialix Jetstream 6000 Terminal Server (by wh@hillerzentri.de)
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 A
5 - - - -

* SEH GmbH Printserver (by wh@hillerzentri.de)
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 0 0 RA
4 1 1 1 SA
5 0 1 0 RA

* Gandalf router (by aland@striker.ottawa.on.ca)
0 1 1 1000 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1000 SA
5 0 1 0 RA
6 1 1 1000 SA

; W=05DC
* Gandalf Xpressway/XpressStack (by aland@striker.ottawa.on.ca)
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA
6 1 1 1 SA

* HP-UX B.11.00 (by gqueri@mail.dotcom.fr)
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA
6 - - - -

* Ascend Pipeline Firmware 4.6 (by c.mock@xsoft.co.at)
0 1 1 1 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA
6 1 1 1 SA

* Shiva flooded
0 1 1 0 RA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Shiva (accessport/isdn-router) (by adria@dns1.i-b-s.net)
0 1 1 0244 SA
2 0 1 0 RA
3 0 1 0 RA
4 1 1 0244 SA
5 0 1 0 RA

* Shiva (accessport/isdn-router) flooded
0 1 1 0244 SA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Lantronix LPS1 Version V3.5 (by biafra@pulhas.org)
0 1 1 1 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Equinox ELS-8 4.12
0 1 1 0 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0 SA
5 - - - -
6 1 1 0 SA

* HP3000 MPE/iX 5.5 (by rodneybrown@pmsc.com)
0 1 1 1 SA
1 0 1 0 R
2 - - - -
3 0 1 0 R
4 - - - -
5 - - - -
6 - - - -

* UnixWare 2.1.1 (by rodneybrown@pmsc.com)
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 A
5 - - - -
6 1 1 1 SA

* AS/400 OS/400 V4R2 (by rodneybrown@pmsc.com)
0 1 1 1 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA
6 1 1 1 SA

* Berkeley: usually HP/UX 9.x, OS/2 Warp 4 Merlin (fix#6) (by Steve Egbert)
0 1 1 2000 SA
1 0 0 2000 R
2 - - - -
3 0 0 2000 R
4 1 1 2000 A
5 - - - -