Detekcia typu OS v paketoch

[snuff1987]

https://www.youtube.com/watch?v=5-WaWumPHEg

Caute chlapci, dufam, ze moja otazka nebude prilis looserska, ale zostal som trochu zaskoceny v clanku o pfsense, ze dokaze blokovat traffic na zaklade toho z akeho systemu bol paket poslany...Pokial viem, v TCP, ICMP, UDP hlavicke tieto informacie nie su, takze na akom principe to funguje?

[Reklama]

[shady]

podla TTL mozno http://subinsb.com/default-device-ttl-values

[Cek]

pfSense software utilizes p0f, an advanced passive OS/network fingerprinting utility to allow you to filter by the Operating System initiating the connection. Want to allow FreeBSD and Linux machines to the Internet, but block Windows machines? pfSense software allows for that (amongst many other possibilities) by passively detecting the Operating System in use.

Takze nejspis podle nejakeho bezneho chovani/provozu si udela tabulku (nejspis s omezenou presnosti) co kde bezi....

[snuff1987]

Dik,
tak je to vyriesene moze za to p0f.. V tom clanku nizsie je napisane na akom principe to funguje. Zaujimava informacia.

https://null-byte.wonderhowto.com/how-to/hack-like-pro-conduct-passive-os-fingerprinting-with-p0f-0151191/