P0f: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „=OS Detection= *p0f -i eth0 'host 10.83.10.10' Windows Server 2012 <pre> .-[ 10.83.10.10/51691 -> 192.168.214.46/443 (syn) ]- | | client = 10.83.10.10/51691…“) |
Thomas (Diskussion | Beiträge) |
||
| Zeile 10: | Zeile 10: | ||
| params = fuzzy | | params = fuzzy | ||
| raw_sig = 4:127+1:0:1460:8192,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 | | raw_sig = 4:127+1:0:1460:8192,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 | ||
| + | | | ||
| + | `---- | ||
| + | </pre> | ||
| + | *p0f -i eth0 'host 10.83.10.10' | ||
| + | Ubuntu 16.04 | ||
| + | <pre> | ||
| + | .-[ 10.81.1.1/58388 -> 172.16.21.194/443 (syn) ]- | ||
| + | | | ||
| + | | client = 10.81.1.1/58388 | ||
| + | | os = Linux 3.11 and newer | ||
| + | | dist = 1 | ||
| + | | params = none | ||
| + | | raw_sig = 4:63+1:0:1460:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 | ||
| | | | ||
`---- | `---- | ||
</pre> | </pre> | ||
Version vom 9. November 2017, 13:37 Uhr
OS Detection
- p0f -i eth0 'host 10.83.10.10'
Windows Server 2012
.-[ 10.83.10.10/51691 -> 192.168.214.46/443 (syn) ]- | | client = 10.83.10.10/51691 | os = Windows 7 or 8 | dist = 1 | params = fuzzy | raw_sig = 4:127+1:0:1460:8192,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0 | `----
- p0f -i eth0 'host 10.83.10.10'
Ubuntu 16.04
.-[ 10.81.1.1/58388 -> 172.16.21.194/443 (syn) ]- | | client = 10.81.1.1/58388 | os = Linux 3.11 and newer | dist = 1 | params = none | raw_sig = 4:63+1:0:1460:mss*20,7:mss,sok,ts,nop,ws:df,id+:0 | `----