Nmap service identification sends a comprehensive series of probing requests and then analyzes the responses to those requests in an attempt to identify services based on service-unique signatures and expected behavior. Additionally, you can see at the bottom of the service-identification output that Nmap relies on feedback from users in order to ensure the continued reliability of their service signatures.