In the following video, I show how to interpret nmap's service fingerprint data for unknown services (using service detection -sV).

And, provided one knows how to identify a service nmap reports as unknown, I show how to update nmap's service probe file to add detections for unknown services..

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com