<?xml version="1.0"?>
<hosts count="39">
<host name="129.21.60.5">
 <ip>129.21.60.5</ip>
 <os>SunOS 5.8</os>
 <hostname></hostname>
 <resolved>fury.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
   <user>eliza</user>
   <user>oompa</user>
   <user>anna</user>
   <user>chrisc</user>
   <user>tourist</user>
   <user>mattw</user>
   <user>sara</user>
   <user>mattw</user>
   <user>jeffm</user>
   <user>jeffm</user>
   <user>rory</user>
   <user>mattg</user>
   <user>grahams</user>
   <user>linus</user>
   <user>nodata</user>
   <user>marius</user>
   <user>mattw</user>
   <user>ryan</user>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220-                              Welcome to the</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line>SunOS 5.8</line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="79 [ Finger ]">
    <line>Login       Name               TTY         Idle    When    Where</line>
    <line>eliza    Eliza Eggert          pts/33        32 Tue 08:07  sky.skycomputers.com</line>
    <line>oompa    Sarah Edwards         pts/2       1:17 Tue 12:11  acd180a-073.rit.edu </line>
    <line>anna     Anna Carr             pts/3         59 Tue 08:09  208.28.178.6        </line>
    <line>chrisc   Christopher Conlon    pts/1        21: Mon 00:25  roc-204-210-140-30.r</line>
    <line>tourist  Sean Stanley          pts/32         1 Tue 11:40  imacdv.cer.jhu.edu  </line>
    <line>mattw    Matt Wronkowski       pts/8        13: Mon 21:26  roc-24-161-70-30.roc</line>
    <line>sara     Sara Berg             pts/22        1d Sun 22:30  h00a0cc61c8b4.ne.cli</line>
    <line>mattw    Matt Wronkowski       pts/10      1:49 Tue 11:27  157.238.124.118     </line>
    <line>jeffm    Jeff Mahoney          pts/11        47 Sun 20:46  starscream:S.0      </line>
    <line>jeffm    Jeff Mahoney         *pts/12      2:29 Sun 20:46  starscream:S.1      </line>
    <line>rory     Rory Kirchner         pts/13         3 Tue 00:41  pool-151-203-110-116</line>
    <line>mattg    Matt Girard           pts/14        37 Tue 11:54  h00400572aad5.ne.cli</line>
    <line>grahams  Sean Graham          *pts/16        32 Tue 11:44  pool-151-203-110-116</line>
    <line>linus    The Greatest Sword-M  pts/17      1:33 Tue 09:35  starfury.cs.rit.edu </line>
    <line>nodata   Michael Douglas       pts/21      5:13 Tue 08:15  28.9.252.64.snet.net</line>
    <line>marius   Marius Grigoriu       pts/25        27 Tue 08:58  130.110.166.36      </line>
    <line>mattw    Matt Wronkowski       pts/19        12 Tue 12:55  157.238.124.118     </line>
    <line>ryan     Ryan Boy</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:29:31 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) PHP/4.1.1 mod_ssl/2.8.9 OpenSSL/0.9.6c</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : UNKNOWN-ERROR</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
   <port name="8080 [ Http-Proxy ]">
   </port>
   <port name="389 [ LDAP => Light Directory Access Protocol ]">
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
  </alerts>
</host>
<host name="129.21.60.8">
 <ip>129.21.60.8</ip>
 <os>NetBSD</os>
 <hostname></hostname>
 <resolved>planb.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.2.0 NetBSD_Secure_Shell-20001003</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 planb.csh.rit.edu ESMTP Postfix</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.9">
 <ip>129.21.60.9</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>mcp.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.1p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line></line>
    <line></line>
    <line>Compaq Tru64 UNIX V5.0 (Rev. 910) (mcp) (pts/0)</line>
    <line></line>
    <line></line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 mcp.csh.rit.edu ESMTP Postfix (1.1.10)</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
   <port name="119 [ News ]">
    <line>502 You have no permission to talk {129.21.60.8-_NOT.IN.DNS},66.88.83.19 Goodbye</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.13">
 <ip>129.21.60.13</ip>
 <os>SunOS 5.8</os>
 <hostname></hostname>
 <resolved>ftp.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
   <user>eliza</user>
   <user>oompa</user>
   <user>anna</user>
   <user>chrisc</user>
   <user>tourist</user>
   <user>mattw</user>
   <user>sara</user>
   <user>mattw</user>
   <user>jeffm</user>
   <user>jeffm</user>
   <user>rory</user>
   <user>mattg</user>
   <user>grahams</user>
   <user>linus</user>
   <user>nodata</user>
   <user>marius</user>
   <user>mattw</user>
   <user>ryan</user>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220-                              Welcome to the</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line>SunOS 5.8</line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="79 [ Finger ]">
    <line>Login       Name               TTY         Idle    When    Where</line>
    <line>eliza    Eliza Eggert          pts/33        34 Tue 08:07  sky.skycomputers.com</line>
    <line>oompa    Sarah Edwards         pts/2       1:18 Tue 12:11  acd180a-073.rit.edu </line>
    <line>anna     Anna Carr             pts/3       1:01 Tue 08:09  208.28.178.6        </line>
    <line>chrisc   Christopher Conlon    pts/1        21: Mon 00:25  roc-204-210-140-30.r</line>
    <line>tourist  Sean Stanley          pts/32           Tue 11:40  imacdv.cer.jhu.edu  </line>
    <line>mattw    Matt Wronkowski       pts/8        13: Mon 21:26  roc-24-161-70-30.roc</line>
    <line>sara     Sara Berg             pts/22        1d Sun 22:30  h00a0cc61c8b4.ne.cli</line>
    <line>mattw    Matt Wronkowski       pts/10      1:50 Tue 11:27  157.238.124.118     </line>
    <line>jeffm    Jeff Mahoney          pts/11        48 Sun 20:46  starscream:S.0      </line>
    <line>jeffm    Jeff Mahoney         *pts/12      2:30 Sun 20:46  starscream:S.1      </line>
    <line>rory     Rory Kirchner         pts/13         4 Tue 00:41  pool-151-203-110-116</line>
    <line>mattg    Matt Girard           pts/14        38 Tue 11:54  h00400572aad5.ne.cli</line>
    <line>grahams  Sean Graham          *pts/16        33 Tue 11:44  pool-151-203-110-116</line>
    <line>linus    The Greatest Sword-M  pts/17      1:34 Tue 09:35  starfury.cs.rit.edu </line>
    <line>nodata   Michael Douglas       pts/21      5:15 Tue 08:15  28.9.252.64.snet.net</line>
    <line>marius   Marius Grigoriu       pts/25        29 Tue 08:58  130.110.166.36      </line>
    <line>mattw    Matt Wronkowski       pts/19        13 Tue 12:55  157.238.124.118     </line>
    <line>ryan     Ryan Boy</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:30:50 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) PHP/4.1.1 mod_ssl/2.8.9 OpenSSL/0.9.6c</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : UNKNOWN-ERROR</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
   <port name="8080 [ Http-Proxy ]">
   </port>
   <port name="389 [ LDAP => Light Directory Access Protocol ]">
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
  </alerts>
</host>
<host name="129.21.60.15">
 <ip>129.21.60.15</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>gibson.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.1p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line></line>
    <line></line>
    <line>Compaq Tru64 UNIX V5.0A (Rev. 1094) (gibson) (pts/0)</line>
    <line></line>
    <line></line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="79 [ Finger ]">
    <line>No one logged on</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>VERSION : ERROR : INVALID-PORT</line>
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
  </alerts>
</host>
<host name="129.21.60.20">
 <ip>129.21.60.20</ip>
 <os>SunOS 5.8</os>
 <hostname></hostname>
 <resolved>source.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
   <user>eliza</user>
   <user>oompa</user>
   <user>anna</user>
   <user>chrisc</user>
   <user>tourist</user>
   <user>mattw</user>
   <user>sara</user>
   <user>mattw</user>
   <user>jeffm</user>
   <user>jeffm</user>
   <user>rory</user>
   <user>mattg</user>
   <user>grahams</user>
   <user>linus</user>
   <user>nodata</user>
   <user>marius</user>
   <user>mattw</user>
   <user>ryan</user>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220-                              Welcome to the</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line>SunOS 5.8</line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="79 [ Finger ]">
    <line>Login       Name               TTY         Idle    When    Where</line>
    <line>eliza    Eliza Eggert          pts/33        35 Tue 08:07  sky.skycomputers.com</line>
    <line>oompa    Sarah Edwards         pts/2       1:19 Tue 12:11  acd180a-073.rit.edu </line>
    <line>anna     Anna Carr             pts/3       1:02 Tue 08:09  208.28.178.6        </line>
    <line>chrisc   Christopher Conlon    pts/1        21: Mon 00:25  roc-204-210-140-30.r</line>
    <line>tourist  Sean Stanley          pts/32         1 Tue 11:40  imacdv.cer.jhu.edu  </line>
    <line>mattw    Matt Wronkowski       pts/8        13: Mon 21:26  roc-24-161-70-30.roc</line>
    <line>sara     Sara Berg             pts/22        1d Sun 22:30  h00a0cc61c8b4.ne.cli</line>
    <line>mattw    Matt Wronkowski       pts/10      1:51 Tue 11:27  157.238.124.118     </line>
    <line>jeffm    Jeff Mahoney          pts/11        49 Sun 20:46  starscream:S.0      </line>
    <line>jeffm    Jeff Mahoney         *pts/12      2:31 Sun 20:46  starscream:S.1      </line>
    <line>rory     Rory Kirchner         pts/13         5 Tue 00:41  pool-151-203-110-116</line>
    <line>mattg    Matt Girard           pts/14        39 Tue 11:54  h00400572aad5.ne.cli</line>
    <line>grahams  Sean Graham          *pts/16        34 Tue 11:44  pool-151-203-110-116</line>
    <line>linus    The Greatest Sword-M  pts/17      1:35 Tue 09:35  starfury.cs.rit.edu </line>
    <line>nodata   Michael Douglas       pts/21      5:16 Tue 08:15  28.9.252.64.snet.net</line>
    <line>marius   Marius Grigoriu       pts/25        30 Tue 08:58  130.110.166.36      </line>
    <line>mattw    Matt Wronkowski       pts/19        14 Tue 12:55  157.238.124.118     </line>
    <line>ryan     Ryan Boy</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:31:52 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) PHP/4.1.1 mod_ssl/2.8.9 OpenSSL/0.9.6c</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : UNKNOWN-ERROR</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
   <port name="8080 [ Http-Proxy ]">
   </port>
   <port name="389 [ LDAP => Light Directory Access Protocol ]">
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
  </alerts>
</host>
<host name="129.21.60.21">
 <ip>129.21.60.21</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>gemini.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1 FreeBSD-20020702</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 gemini.csh.rit.edu ESMTP Postfix</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.27">
 <ip>129.21.60.27</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>nospinzone.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.1p1</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.34">
 <ip>129.21.60.34</ip>
 <os>SunOS 5.8</os>
 <hostname></hostname>
 <resolved>kernel.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
   <user>eliza</user>
   <user>oompa</user>
   <user>anna</user>
   <user>chrisc</user>
   <user>tourist</user>
   <user>mattw</user>
   <user>sara</user>
   <user>mattw</user>
   <user>jeffm</user>
   <user>jeffm</user>
   <user>rory</user>
   <user>mattg</user>
   <user>grahams</user>
   <user>linus</user>
   <user>nodata</user>
   <user>marius</user>
   <user>mattw</user>
   <user>ryan</user>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220-                              Welcome to the</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1</line>
   </port>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line>SunOS 5.8</line>
    <line></line>
    <line></line>
    <line></line>
    <line>login:</line>
   </port>
   <port name="79 [ Finger ]">
    <line>Login       Name               TTY         Idle    When    Where</line>
    <line>eliza    Eliza Eggert          pts/33        36 Tue 08:07  sky.skycomputers.com</line>
    <line>oompa    Sarah Edwards         pts/2       1:21 Tue 12:11  acd180a-073.rit.edu </line>
    <line>anna     Anna Carr             pts/3       1:03 Tue 08:09  208.28.178.6        </line>
    <line>chrisc   Christopher Conlon    pts/1        21: Mon 00:25  roc-204-210-140-30.r</line>
    <line>tourist  Sean Stanley          pts/32         2 Tue 11:40  imacdv.cer.jhu.edu  </line>
    <line>mattw    Matt Wronkowski       pts/8        13: Mon 21:26  roc-24-161-70-30.roc</line>
    <line>sara     Sara Berg             pts/22        1d Sun 22:30  h00a0cc61c8b4.ne.cli</line>
    <line>mattw    Matt Wronkowski       pts/10      1:52 Tue 11:27  157.238.124.118     </line>
    <line>jeffm    Jeff Mahoney          pts/11        51 Sun 20:46  starscream:S.0      </line>
    <line>jeffm    Jeff Mahoney         *pts/12      2:33 Sun 20:46  starscream:S.1      </line>
    <line>rory     Rory Kirchner         pts/13         7 Tue 00:41  pool-151-203-110-116</line>
    <line>mattg    Matt Girard           pts/14        40 Tue 11:54  h00400572aad5.ne.cli</line>
    <line>grahams  Sean Graham          *pts/16        35 Tue 11:44  pool-151-203-110-116</line>
    <line>linus    The Greatest Sword-M  pts/17      1:36 Tue 09:35  starfury.cs.rit.edu </line>
    <line>nodata   Michael Douglas       pts/21      5:17 Tue 08:15  28.9.252.64.snet.net</line>
    <line>marius   Marius Grigoriu       pts/25        31 Tue 08:58  130.110.166.36      </line>
    <line>mattw    Matt Wronkowski       pts/19        15 Tue 12:55  157.238.124.118     </line>
    <line>ryan     Ryan Boy</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:33:07 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) PHP/4.1.1 mod_ssl/2.8.9 OpenSSL/0.9.6c</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : UNKNOWN-ERROR</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
   <port name="8080 [ Http-Proxy ]">
   </port>
   <port name="389 [ LDAP => Light Directory Access Protocol ]">
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
  </alerts>
</host>
<host name="129.21.60.53">
 <ip>129.21.60.53</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>styx.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.5-1.2.30</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.85">
 <ip>129.21.60.85</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>boober.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 boober.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:33:25 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.86">
 <ip>129.21.60.86</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>wimbley.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 wimbley.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:33:33 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.89">
 <ip>129.21.60.89</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>red.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.92">
 <ip>129.21.60.92</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>junior.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 junior.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:33:47 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.95">
 <ip>129.21.60.95</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>doc.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 doc.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:33:46 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.96">
 <ip>129.21.60.96</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>doozer.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 doozer.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:34:01 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.100">
 <ip>129.21.60.100</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>henchy.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask>255.255.254.0</mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 henchy.csh.rit.edu ESMTP Sendmail 8.11.6+Sun/8.11.6; Tue, 16 Jul 2002 13:33:58 -0400 (EDT)</line>
   </port>
   <port name="4045 [ lockd => NFS File Locking ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.130">
 <ip>129.21.60.130</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>phair.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1 Debian 1:3.4p1-2</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 phair.csh.rit.edu ESMTP Exim 3.35 #1 Tue, 16 Jul 2002 13:34:10 -0400</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:34:21 GMT</line>
    <line>Server: Apache/1.3.26 Ben-SSL/1.48 (Unix) Debian GNU/Linux AuthMySQL/3.1 PHP/4.2.1</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : X-VERSION : pidentd 3.0.12 for Linux 2.4.9-686-smp (Sep  2 2001 11:26:57)</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache doc directory</name>
     <impact>An atacker can read the contents of /usr/doc directory</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
   <Info_Alerts>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.60.131">
 <ip>129.21.60.131</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>skirt.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.0p1</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 mail.egobsd.org -- ESMTP Angelic v8.13i</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:34:36 GMT</line>
    <line>Server: Apache/1.3.14 (Unix)</line>
    <line>Last-Modified: Sun, 16 Jun 2002 19:34:33 GMT</line>
    <line>ETag: _919-590-3d0ce849_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 1424</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : UNKNOWN-ERROR</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.132">
 <ip>129.21.60.132</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>coriana-6.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.4p1 FreeBSD-20020702</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 gemini.csh.rit.edu ESMTP Postfix</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.133">
 <ip>129.21.60.133</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>saturn.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 saturn FTP server (lukemftpd 1.1) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9 FreeBSD localisations 20011202</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:33:19 GMT</line>
    <line>Server: Apache/1.3.22 (Unix)</line>
    <line>Last-Modified: Fri, 03 May 2002 07:01:01 GMT</line>
    <line>ETag: _4c236-18-3cd235ad_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 24</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
  </alerts>
</host>
<host name="129.21.60.134">
 <ip>129.21.60.134</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>hex.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220- -- Databits Network Services, Inc --</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9 FreeBSD localisations 20020307</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 hex.databits.net ESMTP Postfix</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="79 [ Finger ]">
    <line>must provide username</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:35:26 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) PHP/4.2.1</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : ERROR : INVALID-PORT</line>
   </port>
   <port name="6789 [ IBM DB2 ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache server-info</name>
     <impact>Information about Apache configuration</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
    <cgi_abuse>
     <name>Apache server-status</name>
     <impact>Information about Apache configuration</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
   <Misc_Alerts>
    <Misc_Alert>
      <name>cfingerd util-c buffer overflow</name>
      <descr>The cfingerd package versions 1.4.3 and earlier is vulnerable to a buffer overflow in the util.c file</descr>
      <bugtraq>http://xforce.iss.net/static/6744.php</bugtraq>
    </Misc_Alert>
   </Misc_Alerts>
   <Info_Alerts>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.60.136">
 <ip>129.21.60.136</ip>
 <os>OpenBSD</os>
 <hostname></hostname>
 <resolved>demon.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="13 [ Daytime => Time of day ]">
    <line>Tue Jul 16 13:33:35 2002</line>
   </port>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 demon.csh.rit.edu FTP server (Version 6.5/OpenBSD) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:33:36 GMT</line>
    <line>Server: Apache/1.3.20 (Unix) PHP/4.0.6</line>
    <line>X-Powered-By: PHP/4.0.6</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
  </alerts>
</host>
<host name="129.21.60.139">
 <ip>129.21.60.139</ip>
 <os>Linux - RedHat</os>
 <hostname></hostname>
 <resolved>zook.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 socks.jcooke.com FTP server (Version wu-2.6.1-20) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9p2</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 socks.jcooke.com ESMTP</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:35:56 GMT</line>
    <line>Server: Apache/1.3.22 (Unix)  (Red-Hat/Linux) mod_ssl/2.8.4 OpenSSL/0.9.6b DAV/1.0.2 PHP/4.0.6 mod_perl/1.26</line>
    <line>X-Powered-By: PHP/4.0.6</line>
    <line>Set-Cookie: PHPSESSID=a5b561f0d033d1971ba89ddede777ee4; path=/</line>
    <line>Expires: Thu, 19 Nov 1981 08:52:00 GMT</line>
    <line>Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0</line>
    <line>Pragma: no-cache</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
   <port name="1080 [ Socks ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache server-status</name>
     <impact>Information about Apache configuration</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
   <Info_Alerts>
    <Info_Alert>
      <name>Perl module running (web server)</name>
      <descr>mod_perl is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
    <Info_Alert>
      <name>SSL enabled (web server)</name>
      <descr>OpenSSL is enabled on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.60.141">
 <ip>129.21.60.141</ip>
 <os>OpenBSD</os>
 <hostname></hostname>
 <resolved>santaclaus.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 santaclaus.friedgreens.com FTP server (Version 6.4/OpenBSD) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH-2.1</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 santaclaus.friedgreens.com ESMTP Sendmail 8.10.1/8.10.1; Tue, 16 Jul 2002 12:28:19 -0500 (EST)</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:28:29 GMT</line>
    <line>Server: Apache/1.3.12 (Unix) mod_ssl/2.6.2 OpenSSL/0.9.5a</line>
    <line>Last-Modified: Sun, 16 Sep 2001 02:46:59 GMT</line>
    <line>ETag: _28048-10f-3ba412a3_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 271</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.142">
 <ip>129.21.60.142</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>rudolph.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:35:35 GMT</line>
    <line>Server: Apache/1.3.19 (Unix) PHP/4.2.1 mod_ssl/2.8.7 OpenSSL/0.9.6</line>
    <line>X-Powered-By: PHP/4.2.1</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.60.143">
 <ip>129.21.60.143</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>foo.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 foo.csh.rit.edu FTP server (Version 6.00LS) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9 FreeBSD localisations 20020307</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 foo.csh.rit.edu ESMTP</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 03:02:07 GMT</line>
    <line>Server: Apache/1.3.22 (Unix) PHP/4.1.2</line>
    <line>Last-Modified: Thu, 13 Dec 2001 20:54:41 GMT</line>
    <line>ETag: _19a606-145-3c191591_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 325</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
    <line>X-Pad: avoid browser bug</line>
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
   <Info_Alerts>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.60.144">
 <ip>129.21.60.144</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>bar.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 bar.csh.rit.edu FTP server (Version 6.00LS) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9 FreeBSD localisations 20011202</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 17:38:40 GMT</line>
    <line>Server: Apache/1.3.22 (Unix)</line>
    <line>Last-Modified: Wed, 15 May 2002 08:21:37 GMT</line>
    <line>ETag: _93e54-3b-3ce21a91_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 59</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
  </alerts>
</host>
<host name="WICKIDPISA (129.21.60.147)">
 <ip>129.21.60.147</ip>
 <os>probably Unix</os>
 <hostname>WICKIDPISA</hostname>
 <resolved></resolved>
 <username>WICKIDPISA</username>
 <mac>00-00-00-00-00-00 (probably Dial-Up)</mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>1</nmb>
 <smb>1</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
   <name serv="WICKIDPISA"  type="Workstation Service"/>
   <name serv="WICKIDPISA"  type="Messenger Service"/>
   <name serv="WICKIDPISA"  type="File Server Service"/>
   <name serv="____MSBROWSE___"  type="Master Browser"/>
   <name serv="WORKGROUP"  type="Domain Name"/>
   <name serv="WORKGROUP"  type="Master Browser"/>
   <name serv="WORKGROUP"  type="Browser Service Elections"/>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="13 [ Daytime => Time of day ]">
    <line>Tue Jul 16 13:37:43 2002</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_3.0.2p1 Debian 1:3.0.2p1-9</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 wickidpisa.csh.rit.edu ESMTP Exim 3.35 #1 Tue, 16 Jul 2002 13:37:43 -0400</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 400 Bad Request</line>
    <line>Date: Tue, 16 Jul 2002 17:37:57 GMT</line>
    <line>Server: Apache/1.3.26 (Unix) Debian GNU/Linux PHP/4.2.1</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html; charset=iso-8859-1</line>
   </port>
   <port name="113 [ identd => Authentication Service ]">
    <line>0 , 0 : X-VERSION : pidentd 3.0.12 for Linux 2.4.9-686-smp (Sep  2 2001 11:26:57)</line>
   </port>
   <port name="443 [ HttpS => Secure HTTP ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
   </cgi_abuses>
   <Info_Alerts>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.60.149">
 <ip>129.21.60.149</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>nanine.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.3.0 FreeBSD localisations 20010713</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.79">
 <ip>129.21.61.79</ip>
 <os>FreeBSD</os>
 <hostname></hostname>
 <resolved>foo2.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>48</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="21 [ Ftp => File Transfer Protocol  ]">
    <line>220 foo.csh.rit.edu FTP server (Version 6.00LS) ready.</line>
   </port>
   <port name="22 [ Ssh =>  Remote Login Protocol ]">
    <line>SSH-1.99-OpenSSH_2.9 FreeBSD localisations 20020307</line>
   </port>
   <port name="25 [ Smtp => Simple Mail Transfer Protocol ]">
    <line>220 foo.csh.rit.edu ESMTP</line>
   </port>
   <port name="53 [ Domain => Domain Name Server ]">
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.1 200 OK</line>
    <line>Date: Tue, 16 Jul 2002 03:03:36 GMT</line>
    <line>Server: Apache/1.3.22 (Unix) PHP/4.1.2</line>
    <line>Last-Modified: Tue, 11 Dec 2001 13:00:46 GMT</line>
    <line>ETag: _162d2-33-3c16037e_</line>
    <line>Accept-Ranges: bytes</line>
    <line>Content-Length: 51</line>
    <line>Connection: close</line>
    <line>Content-Type: text/html</line>
   </port>
   <port name="110 [ Pop3 => Post Office Protocol 3 ]">
   </port>
  </ports>
  <alerts>
   <backdoors>
   </backdoors>
   <cgi_abuses>
    <cgi_abuse>
     <name>Apache /manual/</name>
     <impact>Apache online manual</impact>
     <bugtraq></bugtraq>
    </cgi_abuse>
   </cgi_abuses>
   <Info_Alerts>
    <Info_Alert>
      <name>PHP module running (web server)</name>
      <descr>PHP is installed on this computer</descr>
      <bugtraq></bugtraq>
    </Info_Alert>
   </Info_Alerts>
  </alerts>
</host>
<host name="129.21.61.242">
 <ip>129.21.61.242</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-242.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - South Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.0 501 Not Implemented</line>
    <line>Date: Fri, 05 Mar 1993 23:00:46 EST</line>
    <line>Content-type: text/html</line>
    <line>Expires: Thu, 16 Feb 1989 00:00:00 GMT</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.243">
 <ip>129.21.61.243</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-243.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - South Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
   <port name="80 [ Http => World Wide Web, HTTP ]">
    <line>HTTP/1.0 501 Not Implemented</line>
    <line>Date: Fri, 05 Mar 1993 23:05:26 EST</line>
    <line>Content-type: text/html</line>
    <line>Expires: Thu, 16 Feb 1989 00:00:00 GMT</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.248">
 <ip>129.21.61.248</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-248.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - North Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.249">
 <ip>129.21.61.249</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-249.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - North Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.250">
 <ip>129.21.61.250</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-250.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - North Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.251">
 <ip>129.21.61.251</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-251.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Switch - North Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.252">
 <ip>129.21.61.252</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>xcsh-061e-252.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>239</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line>SH Head Switch - North Closet</line>
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
<host name="129.21.61.254">
 <ip>129.21.61.254</ip>
 <os>probably Unix</os>
 <hostname></hostname>
 <resolved>gateway.csh.rit.edu</resolved>
 <username></username>
 <mac></mac>
 <lanman></lanman>
 <domain></domain>
 <usage></usage>
 <servpack>0</servpack>
 <pdc></pdc>
 <bdc></bdc>
 <ttl>240</ttl>
 <mask></mask>
 <win>0</win>
 <rpc>0</rpc>
 <nmb>0</nmb>
 <smb>0</smb>
 <reg>0</reg>
 <snmp>0</snmp>
  <names>
  </names>
  <domains>
  </domains>
  <shares>
  </shares>
  <groups>
  </groups>
  <users>
  </users>
  <services>
  </services>
  <transports>
  </transports>
  <drives>
  </drives>
  <uses>
  </uses>
  <processes>
  </processes>
  <tod>
  </tod>
  <policy>
  </policy>
  <registry>
  </registry>
  <hotfixes>
  </hotfixes>
  <snmp>
  </snmp>
  <ports>
   <port name="23 [ Telnet => Remote Login Protocol ]">
    <line></line>
    <line>User Access Verification</line>
    <line></line>
    <line>Password:</line>
   </port>
  </ports>
  <alerts>
  </alerts>
</host>
</hosts>
