As stated in the section called “Device and OS classification (Class lines)”, every reference
fingerprint is classified with one or more device types. This list
contains the device types used by Nmap and the criteria for classifying
a device as each type. These same rules are used to classify the device
types in version detection; see the description of the
d//
field in the section called “match Directive”.
This category contains general-purpose operating systems like Linux and Windows. In the nmap-service-probes file this class is indicated by a lack of a d// field.
A bridge combines two or more subnetworks into one. With a bridge this happens at a lower level than with a router. This category also includes things like Ethernet-to-serial bridges.
Devices in this category connect a network to the Internet via cable, ADSL, fiber optics, etc. Some of these devices provide network address translation, a firewall, port forwarding, or other services.
A firewall controls what traffic is allowed into or out of a network. Some also have additional capabilities. This category doesn't include general-purpose operating systems that happen to come with a firewall, but it does include OS distributions purpose-built to work only as a firewall.
A video game console like the Xbox or PlayStation.
A hub joins network segments by re-broadcasting all traffic. Hubs are distinct from switches, which selectively transmit packets only to relevant destinations.
A device that distributes inbound traffic to multiple devices to ease the load on those devices.
This category includes all kinds of audiovisual equipment, including portable music players, home audio systems, TVs, and projectors.
A private branch exchange, or PBX, routes telephone calls within a private organization and connects them to the public telephone network or VoIP.
A handheld computer. Devices that are also telephones go in the "phone" category.
A network-capable telephone that is not a VoIP phone. Devices in this category are typically mobile phones.
Miscellaneous power devices like uninterruptable power supplies and surge protectors.
Network-enabled printers, including printers with an embedded print server.
A print server connects a printer to a network. Printers that contain their own print server go in the "printer" category instead.
Any kind of proxy, including web proxies and other servers that cache data or understand high-level protocols.
Devices that allow servers or other equipment to be monitored or managed remotely.
Routers connect multiple networks. They are distinct from hubs and switches because they route packets between different networks as opposed to extending one network.
Any security device that doesn't fall into the “firewall” category belongs in this category. This includes intrusion detection and prevention systems.
The catch-all category. If a device doesn't fall into one of the other categories, it is specialized. Examples in this category are diverse and include such things as clocks, oscilloscopes, climate sensors, and more.
Data storage devices like tape decks and network-attached storage appliances.
A device that extends a network by selectively re-broadcasting packets. Switches are distinct from hubs, which broadcast all packets.
Devices used by telephone systems that aren't PBXs, like voicemail and ISDN systems.
A device with a keyboard and monitor with the primary purpose of communicating directly with a terminal server or mainframe.
A device providing terminal facilities to clients over a network.
A device that converts between voice over IP (VoIP) protocols and normal telephone traffic. Also may convert different VoIP protocols.
A phone capable of a VoIP protocol.
Wireless access points offer a wireless connection to a network. Most work with radio technology like 802.11b but some use infra-red or something else. Devices that could also be put in another category, like wireless broadband routers, are put in the WAP category because WAPs require special network considerations.
Any kind of camera that stores or transmits pictures or video. This includes everything from consumer webcams to security system cameras.