ovvero
[root@localhost ~]# nmap -sT -sR -sV -O -PI -PT -vv 192.168.1.70
Starting Nmap 4.21ALPHA4 ( http://insecure.org ) at 2007-03-18 12:40 CEST
Initiating ARP Ping Scan at 12:40
Scanning 192.168.1.70 [1 port]
Completed ARP Ping Scan at 12:40, 0.02s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 12:40
Completed Parallel DNS resolution of 1 host. at 12:40, 13.00s elapsed
Initiating Connect() Scan at 12:40
Scanning [1704 ports]
Discovered open port 443/tcp on 192.168.1.70
Discovered open port 80/tcp on 192.168.1.70
Discovered open port 21/tcp on 192.168.1.70
Discovered open port 515/tcp on 192.168.1.70
Discovered open port 23/tcp on 192.168.1.70
Discovered open port 631/tcp on 192.168.1.70
Discovered open port 9100/tcp on 192.168.1.70
Discovered open port 280/tcp on 192.168.1.70
Completed Connect() Scan at 12:40, 1.42s elapsed (1704 total ports)
Initiating Service scan at 12:40
Scanning 7 services on 192.168.1.70
Completed Service scan at 12:40, 6.20s elapsed (8 services on 1 host)
Initiating OS detection (try #1) against 192.168.1.70
SCRIPT ENGINE: Initiating script scanning.
Initiating SCRIPT ENGINE at 12:40
Host 192.168.1.70 appears to be up ... good.
Interesting ports on 192.168.1.70:
Not shown: 1696 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp HP JetDirect ftpd
23/tcp open telnet HP JetDirect printer telnetd (No password)
80/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
280/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
443/tcp open ssl OpenSSL
515/tcp open printer
631/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
9100/tcp open jetdirect
MAC Address: 00:11:0A:EC:5B:EE (Hewlett Packard)
Device type: printer
Running: HP embedded
OS details: HP LaserJet 4200/4600 (JetDirect) printer
OS Fingerprint:
OS:SCAN(V=4.21ALPHA4%D=5/18%OT=21%CT=1%CU=30645%PV=Y%DS=1%G=Y%M=00110A%TM=4
OS:64D82A5%P=i686-pc-linux-gnu)SEQ(SP=98%GCD=1%ISR=9F%TI=I%II=I%SS=S%TS=1)O
OS:PS(O1=M5B4NW0NNT11%O2=M5B4NW0NNT11%O3=M5B4NW0NNT11%O4=M5B4NW0NNT11%O5=M5
................

Uptime: 3.748 days (since Mon May 14 18:43:55 2007)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=152 (Good luck!)
IPID Sequence Generation: Incremental
Service Info: Devices: print server, printer
OS and Service detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
Nmap finished: 1 IP address (1 host up) scanned in 22.269 seconds
Raw packets sent: 20 (1640B) | Rcvd: 16 (1064B)