ORIGINAL firmware:
Firmware Version:  	
3.12.8 Build 110125 Rel.43954n
Hardware Version: 	
MR3220 v1 00000000


~ # nmap -O 192.168.1.1

Starting Nmap 5.21 ( http://nmap.org ) at 2011-10-29 19:19 CEST
Nmap scan report for 192.168.1.1
Host is up (0.0015s latency).
Not shown: 997 closed ports
PORT      STATE SERVICE
80/tcp    open  http
1900/tcp  open  upnp
49152/tcp open  unknown
MAC Address: F4:EC:38:C8:B2:D6 (Unknown)
No exact OS matches for host (If you know what OS is running on it, see http://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=5.21%D=10/29%OT=80%CT=1%CU=39671%PV=Y%DS=1%DC=D%G=Y%M=F4EC38%TM=4
OS:EAC35AC%P=i686-pc-linux-gnu)SEQ(SP=CF%GCD=1%ISR=D0%TI=Z%CI=I%II=I%TS=A)O
OS:PS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O5=M5B4S
OS:T11NW1%O6=M5B4ST11)WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6=16A0)E
OS:CN(R=Y%DF=Y%T=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F
OS:=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5
OS:(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z
OS:%F=R%O=%RD=0%Q=)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=
OS:G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S)

Network Distance: 1 hop

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 15.15 seconds

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

openwrt, 2011-10-27 trunk Linux OpenWrt 2.6.39.4 #1 Thu Oct 27 04:56:37 CEST 2011 mips GNU/Linux

~ # nmap -O 192.168.1.1

Starting Nmap 5.21 ( http://nmap.org ) at 2011-10-29 19:38 CEST
Nmap scan report for 192.168.1.1
Host is up (0.00031s latency).
Not shown: 997 closed ports
PORT   STATE SERVICE
22/tcp open  ssh
23/tcp open  telnet
53/tcp open  domain
MAC Address: F4:EC:38:C8:B2:D7 (Unknown)
No exact OS matches for host (If you know what OS is running on it, see http://nmap.org/submit/ ).
TCP/IP fingerprint:
OS:SCAN(V=5.21%D=10/29%OT=22%CT=1%CU=37020%PV=Y%DS=1%DC=D%G=Y%M=F4EC38%TM=4
OS:EAC3A4A%P=i686-pc-linux-gnu)SEQ(SP=CA%GCD=1%ISR=CD%TI=Z%CI=Z%II=I%TS=U)S
OS:EQ(SP=CA%GCD=2%ISR=CD%TI=Z%CI=Z%II=I%TS=U)OPS(O1=M5B4NNSNW1%O2=M5B4NNSNW
OS:1%O3=M5B4NW1%O4=M5B4NNSNW1%O5=M5B4NNSNW1%O6=M5B4NNS)WIN(W1=3908%W2=3908%
OS:W3=3908%W4=3908%W5=3908%W6=3908)ECN(R=Y%DF=Y%T=40%W=3908%O=M5B4NNSNW1%CC
OS:=N%Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=Y%DF=Y%T=40%W=3
OS:908%S=O%A=S+%F=AS%O=M5B4NNSNW1%RD=0%Q=)T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%
OS:O=%RD=0%Q=)T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=4
OS:0%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T7(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%
OS:Q=)U1(R=Y%DF=N%T=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=
OS:Y%DFI=N%T=40%CD=S)

Network Distance: 1 hop

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 65.89 seconds