I seem to recall Ed Allen telling the group about queso a few years back for OS fingerprinting. Nmap will do this too. Very ingenious guy, that Fyodor.
Brian Kelsay
Dave Hull <> 10/20/04 09:30PM >>>
If you want something to do a passive fingerprint of a remote host, check out p0f, http://lcamtuf.coredump.cx/p0f.shtml. Passive OS fingerprinting sounds interesting, but I wonder, is there a faster way to passively fingerprint on a switched network?
Quoting Brian Kelsay Brian.Kelsay@kcc.usda.gov:
I seem to recall Ed Allen telling the group about queso a few years back for OS fingerprinting. Nmap will do this too. Very ingenious guy, that Fyodor.
Yes, Queso will do active OS fingerprinting. I've never used it, nmap has always been sufficient for my needs. I agree, Fyodor does good work.
-- Dave Hull http://insipid.com
-
Brian Kelsay -
Dave Hull