Listing 4. Using Some Intermediate Features

[root@sprecher]# nmap -sTUR -OIF -oN lamer.txt
  1.12.123.4
Starting nmap V. 2.53 by fyodor@insecure.org
  (www.insecure.org/nmap/)
Interesting ports on bookoosvr (1.12.123.4):
(The 2153 ports scanned but not shown below are in
  state: closed)
Port       State    Service (RPC)           Owner
22/tcp     open     ssh                     root
23/tcp     open     telnet                  root
25/tcp     open     smtp                    root
80/tcp     open     http                    apache
111/tcp    open     sunrpc (rpcbind V2)     rpc
111/udp    open     sunrpc (rpcbind V2)
113/tcp    open     auth                    nobody
443/tcp    open     https                   apache
515/tcp    open     printer                 lp
587/tcp    open     submission              root
999/udp    open     applix
1024/tcp   open     kdm (status V1)         rpcuser
1024/udp   open     (RPC (Unknown Prog #))
1025/udp   open     blackjack (status V1)
1241/tcp   open     msg                     root
3001/tcp   open     nessusd                 root
6000/tcp   open     X11                     root
TCP Sequence Prediction:
        Class=random positive increments
        Difficulty=613547 (Good luck!)
Remote operating system guess:
        Linux 2.1.122 - 2.2.14
Nmap run completed-1 IP address (1 host up)
scanned in 959 seconds