Date: Fri, 09 Feb 2007 18:03:59 +0100 From: Erik Norgaard <norgaard@locolomo.org> To: FreeBSD Questions <questions@freebsd.org> Subject: Passive fingerprinting howto Message-ID: <45CCA97F.5030708@locolomo.org>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Hi: I know that packet filter can use passive fingerprinting to block or pass traffic, but I'd like to use it to identify what crapware is on my network. Can snort do this or is there some other tool that can sniff traffic and identify the connected systems? Thanks, Erik -- Ph: +34.666334818 web: http://www.locolomo.org [-- Attachment #2 --] 0 *H 01 0 + 0 *H 0p0XET+0 *H 011 0 UDK1 0 U TDC10U TDC OCES CA0 061115083154Z 081115090154Z0u1 0 UDK1)0'U Ingen organisatorisk tilknytning1;0U Erik Nrgaard0#U PID:9802-2002-2-54436976931500 *H 0 WR&5ʄ8 #S^fOパBrIsPBc! >r&8hl3?\.UGB\E 3Q!1MrwP*02\|\&s{b'`1&1 00U 0+U $0"20061115083154Z20081115090154Z07U .0*0& *P)00/+#http://www.certifikat.dk/repository0+00 TDC0For anvendelse af certifikatet glder OCES vilkr, CPS og OCES CP, der kan hentes fra www.certifikat.dk/repository. Bemrk, at TDC efter vilkrene har et begrnset ansvar ift. professionelle parter.0A+50301+0%http://ocsp.certifikat.dk/ocsp/status0 U 0norgaard@locolomo.org0U }0{0KIGE0C1 0 UDK1 0 U TDC10U TDC OCES CA10UCRL15570,*(&http://crl.oces.certifikat.dk/oces.crl0 U #0`Vd~'g PKs;0 U ~kG 'f+Q{m&0 U 0 0 *H}A 0 V7.10 *H OJ'|)%Ҋi`1 ^nE jJwKӼB 65V SǶw`y$L =YXʷ/\E~,PW$AB\ 汎 ͙ 7%$ N-ށ"/Ww#ғkMA6S0dD~\w*z Pq`# 69;pS6 뛨3:9s_.'³Q$S0yAƶlqfLi0p0XET+0 *H 011 0 UDK1 0 U TDC10U TDC OCES CA0 061115083154Z 081115090154Z0u1 0 UDK1)0'U Ingen organisatorisk tilknytning1;0U Erik Nrgaard0#U PID:9802-2002-2-54436976931500 *H 0 WR&5ʄ8 #S^fOパBrIsPBc! >r&8hl3?\.UGB\E 3Q!1MrwP*02\|\&s{b'`1&1 00U 0+U $0"20061115083154Z20081115090154Z07U .0*0& *P)00/+#http://www.certifikat.dk/repository0+00 TDC0For anvendelse af certifikatet glder OCES vilkr, CPS og OCES CP, der kan hentes fra www.certifikat.dk/repository. Bemrk, at TDC efter vilkrene har et begrnset ansvar ift. professionelle parter.0A+50301+0%http://ocsp.certifikat.dk/ocsp/status0 U 0norgaard@locolomo.org0U }0{0KIGE0C1 0 UDK1 0 U TDC10U TDC OCES CA10UCRL15570,*(&http://crl.oces.certifikat.dk/oces.crl0 U #0`Vd~'g PKs;0 U ~kG 'f+Q{m&0 U 0 0 *H}A 0 V7.10 *H OJ'|)%Ҋi`1 ^nE jJwKӼB 65V SǶw`y$L =YXʷ/\E~,PW$AB\ 汎 ͙ 7%$ N-ށ"/Ww#ғkMA6S0dD~\w*z Pq`# 69;pS6 뛨3:9s_.'³Q$S0yAƶlqfLi1*0&09011 0 UDK1 0 U TDC10U TDC OCES CAET+0 + G0 *H 1 *H 0 *H 1 070209170359Z0# *H 1 ڼ xwI eF*0H +71;09011 0 UDK1 0 U TDC10U TDC OCES CAET+0J *H 1;9011 0 UDK1 0 U TDC10U TDC OCES CAET+0R *H 1E0C0 *H 0*H 0 *H @0+0 *H (0 *H np,=* 4 @0!D|R tR.<ػN'*d>x:[g~pg, H +7(]{bCQtSA^@t "D8}Nu}LG̝fu
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45CCA97F.5030708>