The osi++ Counter

- Counting the Operating Systems of the Internet -

- Stuff that really counts - ;)



Aug 19 1998 04:12 UTC: 694895 hosts queried.
(query started Aug 2 1998)







Intro



The osi++ counter is a survey of operating system usage on the Internet. I collect host addresses and query these hosts, which operating system they are running. To find out, which operating system a host is running osi++ counter uses QUESO. QUESO is the Hispanic shortcut for "Que Sistema Operativo?" ( == "which operating system?" ). QUESO sends some "handcrafted" IP packets to the server it wants to query. If the server answers by sending back IP packets, these packets are analyzed. Very often now QUESO can find out, which operating system did send the answer packets.






Which Host Addresses do I use?



I queried all the host addresses of the European Host Count which is done by RIPE (Réseaux IP Européens). If I understand them correctly, they claim to hold all host addresses of the .am .at .az .ba .be .bg .by .ch .cy .de .dk .dz .ee .eg .es .fi .fo .fr.gb .ge .gr .hr .ie .il .is .it .lu .lv .ma .md .mk .mt .nl .no .pl .pt .ro .ru .se .si .sk .sm .su .tn .tr .ua .uk .va .yu domains.

At the moment only web servers are queried. All host addresses which are matched by 'grep -i ^www' <name_database> are selected. This resulted in 694895 valid web server addresses.






How Reliable is the osi++ Counter?



I think it it pretty reliable. But... (sorry American lawyers :) The results of the osi++ counter are given without ANY WARRANTY.






Getting the Latest Results as Soon They are Counted.



Get the newest osi++ counter results as soon as they are done and subscribe to the osi++ counter mailing list. Use subject line: subscribe






Fair Use, Copyright





Excerpts from this survey may be freely used and reproduced if osi++ counter
and its url https://members.tripod.com/~hzo/osi_counter/ are attributed.
The osi++ counter is (c) 1998 <hzo@goldfish.cube.net>






The Top Ten Web Server OS
Web Servers (port 80) 98-08-19 04:12 UTC

Summary





Operating System

count

 % recognized 



 Linux 

163264 

28% 


BSD Family  

133402 

23% 



Windows 95/98/NT 

129451 

22% 



 Solaris 

88385 

15% 



 Digital Unix 

11362 

2% 



 AIX 

11266 

2% 



Mac/Apple 

11047 

2% 



HPUX 

6089 

1% 



SCO Unix 

2957 

1% 



Reliant Unix (Siemens-Nixdorf) 

2561 

<1% 



total 

559786 

97% 



Operating systems running on Web Servers (port 80). This is the summary table which shows the big picture. Results are grouped. Sometimes you get a response, which could be from operating system A or operating system B. In this case the count is split between OS A and OS B. Count is the the absolute count how often an operating system was found. % recognized shows how often an OS  was found in relation to the sum of all recognized OS.






Recognized OS Details



Operating System 

count 

% recognized



BSDi, IRIX, Berkeley variant

34655

6%



Berkeley based:Digital, HPUX, SunOs4, AIX3, other

10801

2%



Chamaleon TCP/IP 4 Windows

43

<1%



DG/UX 5.4R3

80

<1%



Digital Unix

8582

1%



Firewalled Solaris 2.x

268

<1%



FreeBSD or NetBSD

597

<1%



HPUX ?? www.hp.com

3389

1%



IBM AIX 4

8566

1%



Linux 1.2.xx

3697

1%



Linux 2.0.xx

135022

23%



Linux 2.0.35

8721

1%



Linux 2.1.xx

12820

2%



MacOS-8

8003

1%



NetBSD, OpenBSD

114822

20%



Not Listen (SCO/Unix ??)

26

<1%



Not Listen Wollengong DOS, 3COM Office switch

5

<1%



Not Listen, Windows 95/98/NT

2366

<1%



Not Listen, Windows 95/98/NT (sleeped)

87

<1%



Reliant Unix (Siemens-Nixdorf)

2561

<1%



SCO OpenServer Release 5

14

<1%



SCO/Unixware? like www2.sco.com

2917

1%



Solaris 2.x

85113

15%



Standard: Solaris 2.x, Linux 2.1.???, MacOS

9013

2%



Unknown Apple OS www.apple.com

40

<1%



Windows 95/98/N

126954

23%



Windows with firewall?

1

<1%



rare Xylan, or firewalled NetBSD

648

<1%



Total

579811

100%



This table shows the how the raw answers came back.Each line represents a typical fingerprint, which is sent back by the host which was queried. Count shows the absolute numbers of operating systems found on a server. %recognized shows the relation of a specific result to all results, where the OS was recognized.






Recognition Quote Summary



Query Result 

count

 % response 



 OS recognized 

597811

83%



OS not recognized

115084

17%



 total 

694895

100%



This table shows how often the operating system was recognized or was not recognized. See next table for details why OS was not recognized. Operating systems of devices like routers are counted as not recognized even if they were determined. Since we want to find out the OS of the server, which we didn't determine in this case.






Operating System Not Recognized



Result 

count 

 % response 



Dead Host, Firewalled Port or Unassigned IP

37312

5%



Not Listen Unknown (may be loss of pkts) ?

629

<1%



Not Listen, try another port

5586

1%



Unknown operating system

65261

9%



Unknown state, SYN flooded or Firewalled ?

973

<1%



3COM Netbuilder

404

<1%



3COM Office Connect Switch

1

<1%



CISCO-IOS 11.??

38

<1%



Cisco 11.2(10a), HP/3000 DTC, BayStack Switch

188

<1%



Cisco IOS 11.?? syn.flooded

48

<1%



HP/JETdirect Printer

2

<1%



Livingston Portmaster ComOs 3.5L

2

<1%



Not Listen HP/JETdirect

5

<1%



Not Listen USR/3COM Netserver

2

<1%



NotListen Livingston PortMaster

28

<1%



Xylan Omni/Pizza Switch

4905

1%



total 

115084 

17% 



This table shows the results, where the operating system remained unknown. In 5% of all cases the host was dead or firewalled. 9% of all cases delivered a result which was not recognized. This could be caused by special hardware software configurations, routers, firewalls or simply by packet loss during query. Perhaps it is possible to resolve this remaining 'black hole' of 9% in future queries.






Links to Internet Statistics








Credits





Without QUESO, there would be no osi++ counter. So special thanks go to <savage@apostols.org> and the QUESO Apostols. And to the people who have contributed packet fingerprints to identify operating systems: biafra@pulhas.org, joaop@promisc.net, pmsac@toxyn.org, eepr0m@toxyn.org, fermin@eup.udl.es , Cyril.Chaboisseau@obs.coe.int, wait_man@??? and ...

Alexandre Khalil <iskandar@EESUN2.tamu.edu> lets me run series of queries on leb.net servers. Thank you Alex for your support.




Your comment or suggestions are always welcome. If you think something needs clarification, hit the »POST« button now and email me at osicount@goldfish.cube.net

PS: I'm out of house until Aug 28th. So responses will be delayed.

Thank you for visiting the osi++ counter

Come back soon.


All trademarks and copyrights on this page are owned by their respective companies (until they are assimilated ^).


Stop!

The osi++ counter ends here.





Unrelated Links...









CLICKHERE TO VISIT THE TOP 1000!