I seem to recall Ed Allen telling the group about queso a few years back for OS fingerprinting. Nmap will do this too. Very ingenious guy, that Fyodor.
Brian Kelsay
Dave Hull <> 10/20/04 09:30PM >>>
If you want something to do a passive fingerprint of a remote host, check out p0f, http://lcamtuf.coredump.cx/p0f.shtml. Passive OS fingerprinting sounds interesting, but I wonder, is there a faster way to passively fingerprint on a switched network?