nmap

root@bt:~# nmap -v -A 172.16.40.49

Starting Nmap 6.01 ( http://nmap.org ) at 2013-03-27 05:50 EDT
NSE: Loaded 93 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Ping Scan at 05:50
Scanning 172.16.40.49 [4 ports]
Completed Ping Scan at 05:50, 0.00s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 05:50
Completed Parallel DNS resolution of 1 host. at 05:50, 0.06s elapsed
Initiating SYN Stealth Scan at 05:50
Scanning 172.16.40.49 [1000 ports]
Discovered open port 139/tcp on 172.16.40.49
Discovered open port 445/tcp on 172.16.40.49
Increasing send delay for 172.16.40.49 from 0 to 5 due to 11 out of 14 dropped probes since last increase.
Increasing send delay for 172.16.40.49 from 5 to 10 due to 11 out of 11 dropped probes since last increase.
Completed SYN Stealth Scan at 05:51, 47.59s elapsed (1000 total ports)
Initiating Service scan at 05:51
Scanning 2 services on 172.16.40.49
Completed Service scan at 05:51, 6.03s elapsed (2 services on 1 host)
Initiating OS detection (try #1) against 172.16.40.49
Initiating Traceroute at 05:51
Completed Traceroute at 05:51, 0.02s elapsed
Initiating Parallel DNS resolution of 2 hosts. at 05:51
Completed Parallel DNS resolution of 2 hosts. at 05:51, 0.06s elapsed
NSE: Script scanning 172.16.40.49.
Initiating NSE at 05:51
Completed NSE at 05:52, 40.06s elapsed
Nmap scan report for 172.16.40.49
Host is up (0.00065s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
139/tcp open netbios-ssn
445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Microsoft Windows 7
OS CPE: cpe:/o:microsoft:windows_7:::enterprise
OS details: Microsoft Windows 7 Enterprise
Network Distance: 2 hops
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: Incremental
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| nbstat:
| NetBIOS name: DINGLI-DAYINJI, NetBIOS user: <unknown>, NetBIOS MAC: 00:24:e8:f0:15:7d (Dell)
| Names
| DINGLI-DAYINJI<00> Flags: <unique><active>
| DINGLI-DAYINJI<20> Flags: <unique><active>
| MSHOME<00> Flags: <group><active>
| MSHOME<1e> Flags: <group><active>
| MSHOME<1d> Flags: <unique><active>
|_ \x01\x02__MSBROWSE__\x02<01> Flags: <group><active>
|_smbv2-enabled: Server doesn't support SMBv2 protocol
| smb-security-mode:
| Account that was used for smb scripts: guest
| User-level authentication
| SMB Security: Challenge/response passwords supported
|_ Message signing disabled (dangerous, but default)
| smb-os-discovery:
| OS: Windows XP (Windows 2000 LAN Manager)
| Computer name: dingli-dayinji
| NetBIOS computer name: DINGLI-DAYINJI
| Workgroup: MSHOME
|_ System time: 2013-03-27 05:51:53 UTC+8

TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.10 ms 192.168.18.2
2 0.13 ms 172.16.40.49

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 96.06 seconds
Raw packets sent: 2075 (92.806KB) | Rcvd: 473 (19.234KB)