TCP/IP stack fingerprinting: Difference between revisions

Content deleted Content added
Line 8:
 
=== How Passive OS Fingerprinting Works ===
Passive fingerprinting works because TCP/IP flag settings are specific to various operating systems. These settings vary from one TCP stack implementation to another and include the following and much much more:
* Initial TTL (8 bits)
* Window size (16 bits)