I am experimenting with NMAP in our network as an assignment, and I meant to do OS scan on one specific host 192.168.2.18, for which I chose the following command,
nmap -O 192.168.2.18
and I was expecting the output of this command to be FreeBSD, since I know that the host is running FreeBSD (as we have been told), but scan result shows more than 2 Operating system which is confusing,
Device type: general purpose Running: Microsoft Windows 7|2012|XP OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_xp::sp3 OS details: Microsoft Windows 7 or Windows Server 2012, Microsoft Windows XP SP3 Service Info: Host: 18; OSs: Unix, FreeBSD; CPE: cpe:/o:freebsd:freebsd
I read about
OS CPE and learned that it is "Common Platform Enumeration," but shouldn't there be just one of those i.e
CPE: cpe:/o:freebsd:freebsd ?
I do not understand why there are 3 CPEs, i.e, windows 7, windows 2012, and windows xp. Can they be honeypots?