TCP/IP stack fingerprinting: Difference between revisions

Revision as of 06:41, 19 April 2015

Revision as of 13:29, 13 January 2016

Line 5:

== TCP/IP Fingerprint Specifics ==

Certain parameters within the [[TCP protocol]] definition are left up to the implementation. Different operating systems, and different versions of the same operating system, set different defaults for these values. By collecting and examining these values, one may differentiate among various operating systems, and implementations of TCP/IP.<ref>{{cite web|url=http://project.honeynet.org/papers/finger/ |title=Know Your Enemy: Passive Fingerprinting |publisher=Project.honeynet.org |date= |accessdate=2011-11-25}}</ref> The TCP/IP fields that may vary

include the following: