BNAT stands for “Broken NAT“. In the scope of Jonathan Claudius work, a NAT is considered broken when the client receives a reply from a server behind a NAT with a different IP than the one it sent the request to. It happens with bad implementations where the DNAT (destination NAT) and the SNAT (source NAT) use [...]
Nmap 5.0 has been released, with a bunch of improvments : look at the changelog.
Here is the update of my previous test of SinFP.
I compared then the output of SinFP and Nmap on different machines, and found out that SinFP made a slightly better job than Nmap in OS detection, though it is not the primary goal of Nmap whereas it is the one of SinFP.
However, I made a mistake that the author of SinFP made me aware of.
I conducted the tests of Nmap using the package of my distribution, thinking it was the latest one.
Actually, it was only the version 4.10. Moreover, the current version, 4.20, brought up a new OS detection engine.
Therefore, a new test with version 4.20 was absolutely needed.
Last week, I found out a very interesting program, SinFP (those who are french and read the Misc magazine must already know 
).
Its goal is to help you detecting what operating system a remote machine is running.
Well, you will tell me that we already have many programs that does this job, starting from the so famous nmap… but the approach is quite different this time.
