Although banner grabbing can be an extremely lucrative source of information at times, version disclosure in service banners is becoming less common. Nmap has a service-identification function that goes far beyond simple banner-grabbing techniques. This recipe will demonstrate how to use Nmap to perform service identification based on probe-response analysis.