Vmap stands for version mapper. It allows you to find out the version of a daemon by fingerprinting the features and replies of bogus commands. It is a great addition to the other *map tools.
How does it work?
Every daemon has its own reply on commands. For example, the HELP command sends different replies on different FTP daemons. This can be used to fingerprint the service. vmap connects to a host's service and sends a list of commands from the directory commands/ to the daemon. Each reply is compared to a database. The fingerprint with most matches is displayed. You can run vmap with or without a valid login given for the remote service.