Passive fingerprinting howto

[Øyvind Skaar]

Erik Norgaard wrote:
> Hi:
> 
> I know that packet filter can use passive fingerprinting to block or 
> pass traffic, but I'd like to use it to identify what crapware is on my 
> network.
> 

Maybe Zalewski's p0f can help ..?
http://lcamtuf.coredump.cx/p0f.shtml

ø


-- 
Øyvind Skaar | os guesswhat odots.org | 482 78 480 | http://odots.org
http://last.fm/user/%67%69%7A%7A%6C%6Fn | http://43things.com/person/%C3%B8s
6865792c207768617420646f20796f75206b6e6f772c
796f752772652061206e65726420746f6f202e2