On Wed, Oct 08, 2003 at 11:44:10AM -0400, Christopher Harrington wrote: > All, > > I am getting false positives on SSH ports. I have a Cisco router using > SSH that is being identified as RPC service 1.5 and a Linux box running > SSH that is being identified as RPC 2.0. The plugin responsible for > both is #10336 according to the .nbe output file. I understand this to > be NMAP. So NMAP must be grabbing the banner. I am using NMAP verison > 3.45 and Nessus 2.0.7.
Can you send us the exact extract from the report ?
