Analysis of Remote Active Operating System Fingerprinting Tools

"Ryan" <[email protected]> Mon, 2 Jun 2003 12:41:55 -0500
Newsgroups gmane.comp.security.papers
Message-ID <000201c3292e$42a0ba50$1f147344@earth>
Analysis of Remote Active Operating System Fingerprinting Tools
Ryan Spangler

Abstract:
There are many tools today that are used for remote active operating
system fingerprinting. They all have their own fingerprinting
techniques. This paper gives an in-depth analysis of three such tools:
Nmap, RINGv2, and Xprobe2. The purpose of the paper is to show how these
tools work, and to understand the advantages and disadvantages they each
offer.

http://www.packetwatch.net/documents/papers/osdetection.pdf

Ryan Spangler
http://www.packetwatch.net