Hi guys,
We used tools like nmap, queso and so on. They're active fingerprinting utilities.
I've copied the email which was sent to a mailing list.
------------------------------------------------------------------
Good day, all,
Michal and I are pleased to provide p0f version 1.8. p0f is the
passive OS fingerprinting utility that can identify a remote machine from
just the syn packet of an incoming connection.
It has patches contributed by Erkin Acar (to calculate header
length), Jose Nazario (to fix a filename issue), Stephen White (display
timestamps in verbose mode) and Trevor Johnson (documentation updates).
Thanks to all who contributed patches and new signatures.
Michal provided the following changes:
- License clarified (LGPL)
- Documentation fixes
- "-o" (output file), "-t" (timestamp), "-U" (no unknown signatures), and
"-K" (no known signatures) options.
Michal has also added code to check the syn packet length as an
additional fingerprint check. The fingerprint file has some of the
signatures updated to include length, with the rest having a length of -1.
When a packet matches one of the length-less signatures, the match is
still made, but a p0f in verbose mode will report the correct length:
a.b.c.d [8 hops]: Windows 2000 *
+ a.b.c.d:port -> m.n.o.p:port
* packet length for this one is 48.
This length can be added back to the signature file - and that's
where we'd love to get your help! Please send in any length entries you
find so we can update the signature file. New signatures for currently
unidentified OS's are also appreciated. Thanks for making p0f a better
tool for all of us.
Bill has added a man page and Linux RPMS.
The new site for the tool is http://www.stearns.org/p0f/ . A tar
file and RPM's can be found there. Matt Scarborough has offered to
provide a Win32 binary for those that are interested. The binary and
additional files needed to compile under win32 will be at the above URL
soon after this release. We also hope to have .deb packages at that URL
in the near future.
Many thanks to all who have helped in p0f development!
Cheers,
- Bill
neil camara ([EMAIL PROTECTED]) - cc{na|sa}, mcse - pgp 0x777777B2
network/security engineer - dl := +1(847)2.21.0.224 cn := +1(847)9.80.17.53
echo "I love windows" | sed -e 's/wi/u/g' | cut -f1 -dd | \
awk '/u/ {printf("%s %s %six\n",$1,$2,$3)}'
--------------------------------------------------------------------------
---o0 Statement of Confidentiality 0o---
The contents of this message and its attachments and subsequent additions are
strictly confidential and proprietary and intended solely for the addressee(s)
hereof. If you are not the named addressee, or this message has been addressed
to you in error, you are directed not to read, disclose, reproduce, distribute,
disseminate or otherwise use thistransmission. Delivery of this message to
any other person other than the intended recipient(s) is not intended in any
way to waive privilege or confidentiality. If you have received this transmis-
sion in error, please alert the sender by reply e-mail; we also request that
you immediately delete this message and its attachments, if any.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
