[Snort-devel] IDS fingerprinting techniques & Snort's FlexResponse...
dayioglu at ...287...
Sat Aug 25 08:26:13 EDT 2001
"Smith, Donald" wrote:
> What fields besides ttl does you plugin deal with.
> Here is an excerpt from an passive OS fingerprinting program by
> So it looks like at least one tool is paying attention to more than
> just the ttl.
my plugin is based on p0f, which is the tool your referred. :-)
Phone: +90 312 2103379 Fax: +90 312 2103333
More information about the Snort-devel