Go to TogaWare.com Home Page. GNU/Linux Desktop Survival Guide
by Graham Williams
Duck Duck Go

Identifying your System

Note that, for example, a HTTP server on port 80 identifying itself as:

  $ httptype togaware.com
  Apache/1.3.29 (Debian GNU/Linux) PHP/4.3.3
or a SSH server on port 22 identifying itself as:
  $ telnet togaware.com 22
  Connected to togaware.com. 
  Escape character is '^]'. 
  SSH-1.99-OpenSSH_3.6.1p2 Debian 1:3.6.1p2-10
is not really a security risk. Serious attacks will attempt all know vulnerabilities of the port, irrespective of what is running behind the port. Thus this is not regarded as sensitive information. On the other-hand, hiding the banner loses a lot for inter-operation.

Indeed, software should advertise its version number to aid debugging in all kinds of circumstances. If there's a security flaw then the flaw should be fixed instead of trying to hide it.

Copyright © 1995-2020 Togaware Pty Ltd
Support further development through the
purchase of the PDF version of the book.
Brought to you by Togaware and the author of open source software including Rattle and wajig.
Also the author of Data Mining with Rattle and Essentials of Data Science.