|
|
|
||||
The osi++ Counter- Counting the Operating Systems of the Internet -- Stuff that really counts - |
||||||
Aug 19 1998 04:12 UTC: 694895 hosts queried.(query started Aug 2 1998) |
||||||
|
||||||
|
|
|
|
|
||
|
Intro |
|
||||
---|---|---|---|---|---|---|
|
The osi++ counter is a survey of operating system usage on the Internet. I collect host addresses and query these hosts, which operating system they are running. To find out, which operating system a host is running osi++ counter uses QUESO. QUESO is the Hispanic shortcut for "Que Sistema Operativo?" ( == "which operating system?" ). QUESO sends some "handcrafted" IP packets to the server it wants to query. If the server answers by sending back IP packets, these packets are analyzed. Very often now QUESO can find out, which operating system did send the answer packets. |
|
||||
|
|
|
||||
|
Which Host Addresses do I use? |
|
||||
|
I queried all the host addresses of the European Host Count which is done by RIPE (Réseaux IP Européens). If I understand them correctly, they claim to hold all host addresses of the .am .at .az .ba .be .bg .by .ch .cy .de .dk .dz .ee .eg .es .fi .fo .fr.gb .ge .gr .hr .ie .il .is .it .lu .lv .ma .md .mk .mt .nl .no .pl .pt .ro .ru .se .si .sk .sm .su .tn .tr .ua .uk .va .yu domains. At the moment only web servers are queried. All host addresses which are matched by 'grep -i ^www' <name_database> are selected. This resulted in 694895 valid web server addresses. |
|
||||
|
|
|
||||
|
How Reliable is the osi++ Counter? |
|
||||
|
I think it it pretty reliable. But... (sorry American lawyers :) The results of the osi++ counter are given without ANY WARRANTY. |
|
||||
|
|
|
||||
|
Getting the Latest Results as Soon They are Counted. |
|
||||
|
Get the newest osi++ counter results as soon as they are done and subscribe to the osi++ counter mailing list. Use subject line: subscribe |
|
||||
|
|
|
||||
|
Fair Use, Copyright |
|
|
|
||
|
|
|
||||
|
|
|
||||
|
The Top Ten Web Server OSWeb Servers (port 80) 98-08-19 04:12 UTCSummary |
|
||||
|
||||||
|
Operating System |
count |
% recognized |
|
||
|
163264 |
28% |
|
|||
|
133402 |
23% |
|
|||
|
129451 |
22% |
|
|||
|
88385 |
15% |
|
|||
|
11362 |
2% |
|
|||
|
11266 |
2% |
|
|||
|
11047 |
2% |
|
|||
|
6089 |
1% |
|
|||
|
2957 |
1% |
|
|||
|
2561 |
<1% |
|
|||
|
total |
559786 |
97% |
|
||
|
Operating systems running on Web Servers (port 80). This is the summary table which shows the big picture. Results are grouped. Sometimes you get a response, which could be from operating system A or operating system B. In this case the count is split between OS A and OS B. Count is the the absolute count how often an operating system was found. % recognized shows how often an OS was found in relation to the sum of all recognized OS. |
|
||||
|
|
|
||||
|
Recognized OS Details |
|
||||
|
Operating System |
count |
% recognized |
|
||
|
BSDi, IRIX, Berkeley variant |
34655 |
6% |
|
||
|
Berkeley based:Digital, HPUX, SunOs4, AIX3, other |
10801 |
2% |
|
||
|
Chamaleon TCP/IP 4 Windows |
43 |
<1% |
|
||
|
DG/UX 5.4R3 |
80 |
<1% |
|
||
|
Digital Unix |
8582 |
1% |
|
||
|
Firewalled Solaris 2.x |
268 |
<1% |
|
||
|
FreeBSD or NetBSD |
597 |
<1% |
|
||
|
HPUX ?? www.hp.com |
3389 |
1% |
|
||
|
IBM AIX 4 |
8566 |
1% |
|
||
|
Linux 1.2.xx |
3697 |
1% |
|
||
|
Linux 2.0.xx |
135022 |
23% |
|
||
|
Linux 2.0.35 |
8721 |
1% |
|
||
|
Linux 2.1.xx |
12820 |
2% |
|
||
|
MacOS-8 |
8003 |
1% |
|
||
|
NetBSD, OpenBSD |
114822 |
20% |
|
||
|
Not Listen (SCO/Unix ??) |
26 |
<1% |
|
||
|
Not Listen Wollengong DOS, 3COM Office switch |
5 |
<1% |
|
||
|
Not Listen, Windows 95/98/NT |
2366 |
<1% |
|
||
|
Not Listen, Windows 95/98/NT (sleeped) |
87 |
<1% |
|
||
|
Reliant Unix (Siemens-Nixdorf) |
2561 |
<1% |
|
||
|
SCO OpenServer Release 5 |
14 |
<1% |
|
||
|
SCO/Unixware? like www2.sco.com |
2917 |
1% |
|
||
|
Solaris 2.x |
85113 |
15% |
|
||
|
Standard: Solaris 2.x, Linux 2.1.???, MacOS |
9013 |
2% |
|
||
|
Unknown Apple OS www.apple.com |
40 |
<1% |
|
||
|
Windows 95/98/N |
126954 |
23% |
|
||
|
Windows with firewall? |
1 |
<1% |
|
||
|
rare Xylan, or firewalled NetBSD |
648 |
<1% |
|
||
|
Total |
579811 |
100% |
|
||
|
This table shows the how the raw answers came back.Each line represents a typical fingerprint, which is sent back by the host which was queried. Count shows the absolute numbers of operating systems found on a server. %recognized shows the relation of a specific result to all results, where the OS was recognized. |
|
||||
|
|
|
||||
|
Recognition Quote Summary |
|
||||
|
Query Result |
count |
% response |
|
||
|
OS recognized |
597811 |
83% |
|
||
|
OS not recognized |
115084 |
17% |
|
||
|
total |
694895 |
100% |
|
||
|
This table shows how often the operating system was recognized or was not recognized. See next table for details why OS was not recognized. Operating systems of devices like routers are counted as not recognized even if they were determined. Since we want to find out the OS of the server, which we didn't determine in this case. |
|
||||
|
|
|
||||
|
Operating System Not Recognized |
|
||||
|
Result |
count |
% response |
|
||
|
Dead Host, Firewalled Port or Unassigned IP |
37312 |
5% |
|
||
|
Not Listen Unknown (may be loss of pkts) ? |
629 |
<1% |
|
||
|
Not Listen, try another port |
5586 |
1% |
|
||
|
Unknown operating system |
65261 |
9% |
|
||
|
Unknown state, SYN flooded or Firewalled ? |
973 |
<1% |
|
||
|
3COM Netbuilder |
404 |
<1% |
|
||
|
3COM Office Connect Switch |
1 |
<1% |
|
||
|
CISCO-IOS 11.?? |
38 |
<1% |
|
||
|
Cisco 11.2(10a), HP/3000 DTC, BayStack Switch |
188 |
<1% |
|
||
|
Cisco IOS 11.?? syn.flooded |
48 |
<1% |
|
||
|
HP/JETdirect Printer |
2 |
<1% |
|
||
|
Livingston Portmaster ComOs 3.5L |
2 |
<1% |
|
||
|
Not Listen HP/JETdirect |
5 |
<1% |
|
||
|
Not Listen USR/3COM Netserver |
2 |
<1% |
|
||
|
NotListen Livingston PortMaster |
28 |
<1% |
|
||
|
Xylan Omni/Pizza Switch |
4905 |
1% |
|
||
|
total |
115084 |
17% |
|
||
|
This table shows the results, where the operating system remained unknown. In 5% of all cases the host was dead or firewalled. 9% of all cases delivered a result which was not recognized. This could be caused by special hardware software configurations, routers, firewalls or simply by packet loss during query. Perhaps it is possible to resolve this remaining 'black hole' of 9% in future queries. |
|
||||
|
|
|
||||
|
Links to Internet Statistics |
|
||||
|
|
|
||||
|
|
|
||||
|
Credits |
|
|
|
||
|
Without QUESO, there would be no osi++ counter. So special thanks go to <savage@apostols.org> and the QUESO Apostols. And to the people who have contributed packet fingerprints to identify operating systems: biafra@pulhas.org, joaop@promisc.net, pmsac@toxyn.org, eepr0m@toxyn.org, fermin@eup.udl.es , Cyril.Chaboisseau@obs.coe.int, wait_man@??? and ... Alexandre Khalil <iskandar@EESUN2.tamu.edu> lets me run series of queries on leb.net servers. Thank you Alex for your support. |
|
||||
|
Your comment or suggestions are always welcome. If you think something needs clarification, hit the »POST« button now and email me at osicount@goldfish.cube.net PS: I'm out of house until Aug 28th. So responses will be delayed. Thank you for visiting the osi++ counter |
|
||||
All trademarks and copyrights on this page are owned by their respective companies (until they are assimilated ^). |
||||||
|
||||||
Stop! The osi++ counter ends here.
|
||||||
|
|
|
||||
|
Unrelated Links... |
|
||||
|
|
|
||||
|
|
|
||||
|
|
|||||
|
|
|||||
|
|
|