[Snort-devel] IDS fingerprinting techniques & Snort's FlexResponse...

Burak DAYIOGLU dayioglu at ...287...
Sat Aug 25 08:26:13 EDT 2001


"Smith, Donald" wrote:
> What fields besides ttl does you plugin deal with.
> Here is an excerpt from an passive OS fingerprinting program by
> So it looks like at least one tool is paying attention to more than
> just the ttl.

my plugin is based on p0f, which is the tool your referred. :-)

thanks.
-- 
Burak DAYIOGLU
Phone: +90 312 2103379   Fax: +90 312 2103333
       http://www.dayioglu.net




More information about the Snort-devel mailing list