;-----------------------------------------------------------
; queso.conf			     by savage@apostols.org
;-----------------------------------------------------------
; CVS: $Id: cheops.conf,v 1.6 1998/12/04 03:31:54 markster Exp $
;-----------------------------------------------------------
; Paket Format:
;
; n s a w f	
;		n -> 0..5       -> paket # (in response to S,SA,F,FA,SF,P)
;		s -> 0 1 -      -> containz seq (1=yes,0=no,-=no reply)
;		a -> 0 1 - +x R -> containz ack
;		w -> 0 1 x -    -> window ( 0=no, 1=si, x=hex_value )
;		f -> SRAFPXYU   -> SYN RST ACK FIN PSH XXX YYY URGENT-ptr
;
;-----------------------------------------------------------
	
* Dead Host, Firewalled Port or Unassigned IP
0 - - - -
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 - - - -

*- Not Listen, try another port
0 0 1 0 RA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA

* Not Listen, DTC Hewlett Packard LAN Driver
0 1 1 0 RA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 0 RA
5 0 1 0 RA
6 1 1 0 RA

* Not Listen, USR/3COM Netserver
0 0 1 0 URA
1 0 0 0 UR
2 0 1 0 URA
3 0 0 0 UR
4 0 1 0 URA

* Not Listen, Windoze 95/98/NT:windows.xpm
0 0 +1 0 RA
1 0 +1 0 R
2 0 +1 0 RA
3 0 +1 0 R
4 0 +2 0 RA
5 0 +0 0 RA

* Not Listen, Windoze 95/98/NT (sleeped):windows.xpm
0 - - - -
1 0 +1 0 R
2 0 +1 0 RA
3 0 +1 0 R
4 0 +2 0 RA
5 0 +0 0 RA

* Not Listen HP/JETdirect:printer.xpm
0 0 1 0 RA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 0 1 0 RA

* Not Listen IGEL Etherminal 2C (by wh@hillerzentri.de)
0 0 1 0 R
1 0 0 0 R
2 0 1 0 R
3 0 0 0 R
4 0 1 0 R
5 0 1 0 R

* Not Listen Wollongong DOS TCP/IP, 3COM Office/Switch  
0 0 1 0 RPA
1 0 1 0 RPA
2 0 1 0 RPA
3 0 1 0 RPA
4 0 1 0 RPA

* Not Listen (SCO/Unix) or Macintosh:macintosh.xpm
0 0 1 1 RA
1 0 0 1 R

*- Not Listen Unknown (may be loss of pkts) ?  
0 0 1 0 RA

*- Firewall drops SYN pakets.  
0 - - - -
1 0 0 0 R
3 0 0 0 R
4 - - - -
6 - - - -

*- Firewalled Solaris 2.x:solaris.xpm
0 1 1 2398 SA
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - - 

*- Firewalled host/port or network congestion  
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 - - - -
5 - - - - 

*- Firewalled host/port or network congestion  
0 - - - -

* Linux 2.0.35 to 2.0.9999 :linux.xpm
0 1 1 7FE0 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7FE0 SFA
5 - - - - 
6 1 1 7FE0 SA

*- Linux 2.0.xx -sendmail??- :linux.xpm
0 1 1 7FE0 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA
5 0 1 0 RA
6 0 1 0 RA

* Linux 1.2.xx :linux.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SFA
5 - - - - 
6 1 1 1 SA

* Linux 1.3.xx, 2.0.0 to 2.0.34  :linux.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SFA
5 - - - - 
6 1 1 1 SAXY

* Linux 2.1.xx :linux.xpm
0 1 1 7E4C SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7E4C SA
5 - - - -
6 1 1 7E4C SA

* Linux 2.1.xx :linux.xpm
0 1 1 7FB8 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7FB8 SA
5 - - - -
6 1 1 7FB8 SA

* MacOS-8 (or unusual Solaris):macintosh.xpm
0 1 1 4518 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 4518 SA
5 - - - -

* MacTCP:macintosh.xpm
0 1 1 2D25 SA
1 0 0 1234 R
3 0 0 1234 R
4 1 1 0 A

* Solaris 2.x:solaris.xpm
0 1 1 2398 SA
1 0 0 0 R
2 - - - -

* Solaris 2.x:solaris.xpm
0 1 1 2238 SA
1 0 0 0 R
2 - - - -

* Solaris 2.x firewalled (like www.apple.com):solaris.xpm
0 1 1 2398 SA
1 - - - -
2 0 1 1234 RA
3 0 0 1234 R
4 1 1 2398 SA
5 0 1 1234 RA

* NetBSD 1.3.x:bsd.xpm
0 1 1 4000 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 4000 SA
5 - - - -

* Standard -- Solaris 2.x, Linux 2.1.???, MacOS:solaris.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 SA
5 - - - -

* HP/JETdirect Printer:printer.xpm
0 1 1 1 SA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 0 1 0 RA

* HP/JETdirect Printer (old model):printer.xpm
0 1 1 1 SA
1 0 1 0 RA
2 - - - - 
3 0 1 0 RA
4 1 1 1 SA
5 - - - -

* HP/JETdirect Printer (by jay@gnu.org):printer.xpm
0 1 1 16D0 SA
1 0 1 0 RA
2 - - - -
3 0 1 0 RA
4 1 1 16D0 SA
5 - - - -

* Berkeley VAX/VMS, OpenVMS AXP:vms.xpm
0 1 1 0BB8 SA
1 0 0 0BB8 R
2 - - - -
3 0 0 0BB8 R
4 1 1 0BB8 A
5 - - - -

* VAX/VMS (by bem@cmc.net):vms.xpm
0 1 1 1800 SA
1 0 0 1800 R
2 - - - -
3 0 0 1800 R
4 1 1 1800 A
5 - - - -

* Berkeley DECserver (terminal server).  
0 1 1 600 SA
1 0 0 600 R
2 - - - -
3 0 0 600 R
4 1 1 600 A
5 - - - -

* HP-UX B.10.20:hp.xpm
0 1 1 8000 SA
1 0 0 8000 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 8000 A
5 0 1 0 RA

* usually Digital Unix, OSF/1 V3.0, HP-UX 10.x:unix.xpm
0 1 1 8000 SA
1 0 0 8000 R
2 - - - -
3 0 0 8000 R
4 1 1 8000 A
5 - - - -

* DG/UX 5.4R3 (by biafra@pulhas.org):unix.xpm
0 1 1 2238 SA
1 0 0 2238 R
2 - - - -
3 0 0 2238 R
4 1 1 2234 A
5 - - - -

* usually SunOS 4.x, NexT, Annex, HP SNMP Hub's, and Shivas:hub.xpm
0 1 1 1000 SA
1 0 0 1000 R
2 - - - -
3 0 0 1000 R
4 1 1 1000 A
5 - - - -

* usually HP/UX 9.x, OS/2 Warp 4 Merlin (fix#6):hp.xpm
0 1 1 2000 SA
1 0 0 2000 R
2 - - - -
3 0 0 2000 R
4 1 1 2000 A
5 - - - -

* IRIX 5.x:sgi.xpm
0 1 1 F000 SA
1 0 0 F000 R
2 - - - -
3 0 0 F000 R
4 1 1 F000 A
5 - - - -

* Digital, HPUX, SunOs4, AIX3, OS/2 WARP-4, others...  :unix.xpm
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 A
5 - - - -

* Windoze NT firewalled (like *.microsoft.com):windows.xpm
0 1 1 2180 SA
1 0 R 0 R
2 0 1 0 RA
3 0 R 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Windoze NT firewalled (like www.compaq.com):windows.xpm
0 1 +1 2180 SA
1 - - - - 
2 0 +0 1234 RA
3 0 0 1234 R
4 1 +1 2180 SA
5 0 +0 1234 RA

* Windoze NT firewalled (like www.compaq.com):windows.xpm
0 1 +1 2180 SA
1 0 R 0 R
2 0 +0 1234 RA
3 0 0 1234 R
4 1 +1 2180 SA
5 0 +0 1234 RA

* Windoze 95/98/NT:windows.xpm
0 1 1 2180 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Windoze NT with RaptorFirewall (by stuart@ins.com):windows.xpm
0 1 1 2180 SA
1 0 1 0 R
2 - - - -
3 0 1 0 R
4 1 1 2180 SA
5 - - - -

* Wollongong TCP/IP for MSDOS  
0 1 1 1 SPA
1 0 1 0 RPA
2 0 1 0 RPA
3 0 1 0 RPA
4 0 1 0 SPA

* IBM AIX 4   :ibm.xpm
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 1 1 1 SA 

* IBM AIX 4 :ibm.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 - - - -
4 - - - -
5 - - - -
6 1 1 1 SA 

* Plan9, CISCO-IOS 11.2(8)  :router.xpm
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 SA
5 1 1 0 RA

* CISCO-IOS 11.0  :router.xpm
0 1 1 1 SA
1 - - - -
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA

* Cisco IOS 11.0 syn.flooded :router.xpm
0 - - - -
1 - - - -
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA

* 3COM Office Connect Switch  
0 1 1 1 SA
1 0 1 0 RAP
2 0 1 0 RAP
3 0 1 0 RAP
4 1 1 1 SA
5 0 1 0 RAP

* 3COM Netbuilder (by wait_man@linux.apostols.org)
0 1 1 1 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 1 1 1 SA

* SCO/Unix like www.sco.com :sco.xpm
0 1 1 1 SA
1 - - - -
2 0 1 1234 RA
3 0 0 1234 R
4 1 1 0FFC A
5 0 1 1234 RA

* SCO/Unix or SCO/Openserver :sco.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0FFC A
5 - - - -

* Novell Netware TCP/IP  :novell.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 - - - -
4 1 1 1 SA
5 - - - -

* FreeBSD :bsd.xpm
0 1 1 4350 SA
1 0 0 4000 R
2 - - - -
3 0 0 4000 R
4 1 1 4350 SA
5 - - - -

* FreeBSD, NetBSD, OpenBSD  :bsd.xpm
0 1 1 4000 SA
1 0 0 4000 R
2 - - - -
3 0 0 4000 R
4 1 1 4000 SA
5 - - - -

* ClamIP Nautica Router by Bay Networks :router.xpm
0 1 1 0800 SA
1 - - - -
2 - - - -
3 - - - -
4 1 1 0800 SA
5 - - - -
6 1 1 0800 SA

* Reliant Unix from Siemens-Nixdorf :unix.xpm
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 1 1 1 SA
5 - - - -
6 1 1 1 SA

* IRIX 6.x?  :sgi.xpm
0 1 1 F000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 F000 A
5 0 1 0 RA

* IRIX 6.x  :sgi.xpm
0 1 1 C000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 C000 A
5 0 1 0 RA

* BSDi 3.0, IBM S/390 :bsd.xpm
0 1 1 2000 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 2000 SA
5 0 1 0 RA

* BSDi or IRIX  :sgi.xpm
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 A
5 0 1 0 RA


* Digital VMS 5x/6x or Ultrix :vms.xpm
0 1 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 RA
5 - - - - 

* CISCO-IGS (by joaop@promisc.net) :router.xpm
0 1 1 0 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 0 1 0 RA

* IBM 8237 Hub model 2 (by pmsac@toxyn.org):hub.xpm
0 1 1 1 SA
1 1 1 1 SA
2 - - - -
3 - - - -
4 1 1 1 SA

* Minix v.??? (by eepr0m@toxyn.org):unix.xpm
0 1 1 1 RA
1 0 1 1 R
2 - - - -
3 - - - -
4 1 1 1 RA

* NotListen Livingston PortMaster (by eepr0m@toxyn.org)
0 - - - -
1 - - - -
2 - - - -
3 - - - -
4 0 1 0 RA

* Livingston PortMaster ComOS 3.5L (by eepr0m@toxyn.org)
0 1 1 1 SA
1 - - - -
2 - - - -
3 - - - -
4 0 1 0 RA

* HP/3000 DTC (VTLS TCP/IP frontend):hp.xpm
0 1 1 03CA SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 03CA SA
5 0 1 0 RA

* Cisco 11.2(11)P:router.xpm
0 1 +1 1 SA
1 0 0 0 R
2 0 +0 0 RA
3 0 0 0 R
4 1 +1 1 SA
5 0 +24 0 RA

* Cisco 11.2(10a), HP/3000 DTC, BayStack Switch, NT 4.0 SP 4:router.xpm
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 1 SA
5 0 1 0 RA

* USR/3COM Netserver. 
0 1 1 1 SA
1 0 0 0 UR
2 0 1 0 URA
3 0 0 0 UR
4 1 1 1 SA
5 0 1 0 URA

* Livingston Portmaster (by bem@cmc.net)
0 1 1 0800 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Windoze with Firewall ?:windows.xpm
0 1 1 1 SA
1 0 1 0 R
2 0 1 1 RAF
3 0 1 1 RAF
4 1 1 1 SA
5 0 1 1 RAP

* Chamaleon TCP/IP 4 Windoze (by fermin@eup.udl.es):windows.xpm
0 1 1 2180 SA
1 0 1 0 R
2 0 1 0 RA
3 0 0 0 R
4 1 1 2180 SA
5 0 1 0 RA

* Cyclades PathRAS (by Cyril.Chaboisseau@obs.coe.int)
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA

* Sinix (by adulau@befree.be)
0 1 1 7FFF SA
1 0 0 0 R
2 - - - - 
3 0 0 0 R
4 1 1 7FFF A
5 - - - -

* Novell Netware 5.0 (by rzm@icm.edu.pl) :novell.xpm
0 1 1 FFFF SA
1 0 0 0 R
2 - - - -
3 - - - - 
4 1 1 FFFE SA
5 - - - -

* IBM AS/400 :ibm.xpm
0 1 1 2000 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 - - - -
5 0 1 0 RA

* Novell TCP/IP - DOS LanWorkPlace 4.12 (by adulau@befree.be) :novell.xpm
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 0 0 R
4 - - - - 
5 0 1 0 RA
6 - - - -

* IBM XStation 1x0 (by Stefan.Eilemann@dlr.de) :ibm.xpm
0 0 1 1 SA
1 0 0 1 R
2 - - - -
3 0 0 1 R
4 1 1 1 A
5 - - - -
6 1 1 1 SA

* Vircom Major TCP/IP (by leighk@cybercomm.net)
0 1 1 0800 SA
1 1 1 0800 SA
2 0 1 0 R
3 - - - -
4 1 1 0800 SA
5 - - - -

* Computone Intelliserver (by leighk@cybercomm.net)
0 1 1 0400 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0400 A
5 - - - -

* Specialix Jetstream 6000 Terminal Server (by wh@hillerzentri.de)
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 A
5 - - - -

* SEH GmbH Printserver (by wh@hillerzentri.de) :printer.xpm
0 1 1 1 SA
1 1 1 1 SA
2 0 1 0 RA
3 0 0 0 RA
4 1 1 1 SA
5 0 1 0 RA

* Gandalf router (by aland@striker.ottawa.on.ca) :router.xpm
0 1 1 1000 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1000 SA
5 0 1 0 RA
6 1 1 1000 SA

; W=05DC
* Gandalf Xpressway/XpressStack (by aland@striker.ottawa.on.ca) :hub.xpm
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA
6 1 1 1 SA

* HP-UX B.11.00 (by gqueri@mail.dotcom.fr) :hp.xpm
0 1 1 1 SA
1 0 0 0 R
2 0 1 0 RA
3 0 0 0 R
4 - - - -
5 0 1 0 RA
6 - - - -

* Ascend Pipeline Firmware 4.6 (by c.mock@xsoft.co.at) :router.xpm
0 1 1 1 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA
6 1 1 1 SA

* Shiva flooded
0 1 1 0 RA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Shiva (accessport/isdn-router) (by adria@dns1.i-b-s.net)
0 1 1 0244 SA
2 0 1 0 RA
3 0 1 0 RA
4 1 1 0244 SA
5 0 1 0 RA

* Shiva (accessport/isdn-router) flooded
0 1 1 0244 SA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Lantronix LPS1 Version V3.5 (by biafra@pulhas.org)
0 1 1 1 SA
1 0 1 0 RA
2 0 1 0 RA
3 0 1 0 RA
4 0 1 0 RA
5 0 1 0 RA

* Equinox ELS-8 4.12
0 1 1 0 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 0 SA
5 - - - -
6 1 1 0 SA

* HP3000 MPE/iX 5.5 (by rodneybrown@pmsc.com) :hp.xpm
0 1 1 1 SA
1 0 1 0 R
2 - - - -
3 0 1 0 R
4 - - - -
5 - - - -
6 - - - -

* UnixWare 2.1.1 (by rodneybrown@pmsc.com) :unix.xpm
0 1 1 1 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 1 A
5 - - - -
6 1 1 1 SA

* AS/400 OS/400 V4R2 (by rodneybrown@pmsc.com) :ibm.xpm
0 1 1 1 SA
1 0 1 0 R
2 0 1 0 RA
3 0 1 0 R
4 1 1 1 SA
5 0 1 0 RA
6 1 1 1 SA

