p0f module

[Jon S.]

p0f is a passive network scanner (opposite of nmap). instead of sending 
packets to the host, it looks at all incoming packets and analyzes them 
and can get remote OS, uptime, etc. Probably cool to use this with snort 
to keep track of those stupid script kiddies :)

-Striker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: p0f.tar.bz2
Type: application/x-bzip
Size: 1049 bytes
Desc: not available
Url : http://lunar-linux.org/pipermail/lunar/attachments/20040216/9a947558/p0f.tar.bin