TCP/IP stack fingerprinting: Difference between revisions

Revision as of 19:58, 27 June 2012

Revision as of 08:46, 16 July 2012

Line 28:

== Fingerprinting tools ==

A list of TCP/OS Fingerprinting Tools

* [[Ettercap (computing)|Ettercap]] -– passive TCP/IP stack fingerprinting.

* [[NetworkMiner]] -– passive [[DHCP]] and TCP/IP stack fingerprinting (combines p0f, Ettercap and Satori databases)

* [[Nmap]] -– comprehensive active stack fingerprinting.

* [[p0f]] -– comprehensive passive TCP/IP stack fingerprinting.

* NetSleuth -– free passive fingerprinting and analysis tool

* [[PacketFence]]<ref>{{cite web|url=http://www.packetfence.org/ |title=PacketFence |publisher=PacketFence |date=2011-11-21 |accessdate=2011-11-25}}</ref> -– open source [[Network Access Control|NAC]] with passive DHCP fingerprinting.

* [[PRADS]] -– Passive comprehensive TCP/IP stack fingerprinting and service detection

* Satori -– passive [[Cisco Discovery Protocol|CDP]], DHCP, ICMP, [[HP Switch Protocol|HPSP]], [[HTTP]], TCP/IP and other stack fingerprinting.

* SinFP -– single-port active/passive fingerprinting.

* XProbe2 -– active TCP/IP stack fingerprinting.

== References ==