[ 原始碼: p0f ]
套件:p0f(3.09b-3)
Passive OS fingerprinting tool
p0f performs passive OS detection based on SYN packets. Unlike nmap and queso, p0f does recognition without sending any data. Additionally, it is able to determine the distance to the remote host, and can be used to determine the structure of a foreign or local network. When running on the gateway of a network it is able to gather huge amounts of data and provide useful statistics. On a user-end computer it could be used as powerful IDS add-on. p0f supports full tcpdump-style filtering expressions, and has an extensible and detailed fingerprinting database.
其他與 p0f 有關的套件
|
|
|
|
-
- dep: libc6 (>= 2.28)
- GNU C 函式庫:共用函式庫
同時作為一個虛擬套件由這些套件填實: libc6-udeb
-
- dep: libpcap0.8 (>= 0.9.8)
- system interface for user-level packet capture