# This fingerprint matches the default constructor values of our fingerprint, useful when we want
# to force scans to keep going even when the target host isn't giving any replies.
Offline Host
0 0 -1 0 1 60 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 

Windows 7
3 3 950784 1000752 1 50 1 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 

Windows 7 or Windows Server 2008
3 3 594733 1000093 0 36 1 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 1 1 1 

Windows XP or Windows Server 2003
1 1 -1 0 1 60 1 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

Linux 3.x (fingerprint from Ubuntu 12.10)
3 3 996057 1001182 1 43 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

Linux 2.6 (fingerprint from Century Link Q1000 DSL Router)
3 3 997188 1012079 1 41 1 1 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 

Linux 2.6 (newer than 2.6.24) (fingerprint from Ubuntu 8.04)
3 3 999620 1001391 1 46 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

Linux 2.6 (older than 2.6.24) (fingerprint from Knoppix 5)
3 3 992601 1009122 1 22 1 1 1 1 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

Linux 2.4 (fingerprint from Damn Small Linux 4.4.10)
3 3 995179 1001901 1 60 1 0 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

FreeBSD or OpenBSD (tested on FreeBSD 7.4-9.0 and OpenBSD 5.2)
1 1 -1 0 1 60 1 0 1 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

NetBSD (fingerprint from NetBSD 6.0.1)
1 1 -1 0 1 60 1 0 1 0 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 

Android 4.0.4
0 2 1011707 6000952 0 19 1 1 1 1 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 

Android 4.0.4
1 2 1005880 1031089 1 31 1 1 1 1 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 

Android 3.2
0 2 998297 998297 1 21 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 

Minix 3.2
0 5 499470 524578 1 60 1 0 1 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

ReactOS 0.3.13
0 1 -1 0 1 60 1 0 1 0 1 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0 1 1 1 

Lexmark Printer
3 3 990772 1000011 1 14 1 1 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

SonicWall OS
0 3 40438 50016 0 60 1 0 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 

# I believe this was a taken on a Canon printing device
Wind River VxWorks
1 1 -1 0 1 19 1 0 1 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

# This had the odd behavior of replying with a different MAC in the ethernet frame from what reported it's ARP REPLY
3com NBX V3000 (IP Telephone System)
0 3 39927 49987 0 33 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 

Honeyd Honeypot
0 2 500205 500205 1 60 1 0 1 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 

Scientific Atlanta DPC2100 Cable Modem
1 1 -1 0 1 60 1 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 

Terayon TJ715 Cable Modem
0 1 -1 0 1 60 1 0 1 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 

SMC Barricade Broadband Router 
0 0 -1 0 1 60 1 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 

# Timing values between 36-60, should really make that fingerprint field a range
MontaVista embedded Linux 2.4.17 (fingerprint on Actiontec GT701 DSL modem/router)
3 3 991839 1001330 1 45 1 0 1 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

MontaVista embedded Linux 2.4.17 (fingerprint on Actiontec GT701 DSL modem/router)
3 3 990969 1001298 1 36 1 1 1 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

