System structure & function When these systems are scanned by NMAP they provide a TCP-stack fingerprint signature that looks quite realistic. Due to this the intruder could conclude that the system has an open port and is easy to attack. Therefore this daemon is able to provide a script-based log of any attempt of connecting to the system.