# nmap -O -sV microsoft.com
Starting nmap 3.93 ( http://www.insecure.org/nmap/ ) at 2005-10-29 16:08 CEST
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Interesting ports on 207.46.130.108:
(The 1666 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
443/tcp open ssl/http Microsoft IIS webserver 6.0
Device type: general purpose|router
Running (JUST GUESSING) : [B]NetBSD (94%), OpenBSD 3.X (90%)[/B], Microsoft Windows 2003/.NET|NT/2K/XP|95/98/ME (89%), Cisco IOS 11.X (88%), DEC IOS 10.X (88%), Cabletron embedded (88%), HP HP-UX 11.X (85%), IBM AIX 4.X (85%)
Aggressive OS guesses: NetBSD 1.6.2 (X86) (94%), OpenBSD 3.5 or 3.6 (90%), Microsoft Windows 2003 Server Standart Edition SP1 (89%), Microsoft Windows 2003 Server, 2003 Server SP1 or XP Pro SP2 (89%), NetBSD 1.5_ALPHA i386 (89%), Cisco 1601 (IOS 11.0) or DECbrouter90T1 (Runs Cisco IOS 10.2(5)) (88%), Cisco 4500 router running IOS 11.2(2) (88%), Microsoft Windows 98SE + IE5.5sp1 (88%), Cabletron Smart Switch Router 8600 (88%), NetBSD 1.6.2 (alpha) (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows
Nmap finished: 1 IP address (1 host up) scanned in 354.864 seconds