> Wouldn't http://lcamtuf.coredump.cx/p0f.shtml make that simple? No > outbound probing involved.
I believe p0f does TCP fingerprinting, so it would be useless with NTP. _______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
