[Snort-users] Snort OS Fingerprint Scan Detectino

yasir al-ibrahem alibrahem.yasir at ...11827...
Thu Nov 3 23:06:20 EDT 2016


I'm using NMAP to detect the OS type and version of another machine that
hosts snort.

Snort is able to detect the ICMP tests, but that doesn't clearly indicate
that an OS fingerprinting attack is taking place.

I'm wondering if snort has such a specific alert. and if there's any
specific configuration for OS fingerprint detection.

Appreciate your help.


*Yasir Saad Al-Ibrahem+1-312-428-0301*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20161103/9e4ccd67/attachment.html>

More information about the Snort-users mailing list