！！M$不应该是使用bsd的系统吧

fz-L

D:\nmap>nmap -sS -O www.microsoft.com

Starting nmap 3.93 ( http://www.insecure.org/nmap ) at 2005-12-02 16:29 中国标准
时间
Warning:  OS detection will be MUCH less reliable because we did not find at lea
st 1 open and 1 closed TCP port
Interesting ports on 207.46.19.60:
(The 1666 ports scanned but not shown below are in state: filtered)
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https
Device type: general purpose|router

Running (JUST GUESSING) : NetBSD (94%), OpenBSD 3.X (90%), Microsoft Windows 200
3/.NET|NT/2K/XP|95/98/ME (89%), Cisco IOS 11.X (88%), DEC IOS 10.X (88%), Cablet
ron embedded (88%), HP HP-UX 11.X (85%), IBM AIX 4.X (85%)
Aggressive OS guesses: NetBSD 1.6.2 (X86) (94%), OpenBSD 3.5 or 3.6 (90%), Micro
soft Windows 2003 Server Standart Edition SP1 (89%), Microsoft Windows 2003 Serv
er, 2003 Server SP1 or XP Pro SP2 (89%), NetBSD 1.5_ALPHA i386 (89%), Cisco 1601
(IOS 11.0) or DECbrouter90T1 (Runs Cisco IOS 10.2(5)) (88%), Cisco 4500 router
running IOS 11.2(2) (88%), Microsoft Windows 98SE + IE5.5sp1 (88%), Cabletron Sm
art Switch Router 8600 (88%), NetBSD 1.6.2 (alpha) (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap finished: 1 IP address (1 host up) scanned in 104.360 seconds
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

ipaddr

前端应该是用Nix做的负载。

fz-L

应该是这个解释了~

ecloud

当然“是”了！
你以为windows能够承载像www.microsoft.com那样流量的网站吗？

t920

嗯～没研究过微软的站点，仅仅说几个猜测：

1、前端肯定用了负载均衡，不信你可以去ping一下该站点，每次结果都可能不同。

2、nmap的扫描结果是可以更改的，虽然指纹识别并不容易改，但ms毕竟是ms。

3、该站点应该是基于.NET系统的（连自己的网站都不用，那谁还买他的东西？），所以不太可能是bsd类的系统。

4、win2003的性能还是说的过去的，虽然一如既往的是个漏勺