Passive OS fingerprint module release

March 26, 2009 zbr Uncategorized

Passive OS fingerprinting netfilter module allows to passively detect remote OS and perform various netfilter actions based on that knowledge. This module compares some data (WS, MSS, options and it’s order, ttl, df and others) from packets with SYN bit set with dynamically loaded OS fingerprints.

This release brings us following features:

• move from kernel netlink connector to netfilter netlink (nfnetlink)
• use helper functions from the 1.4.3 iptables release
• code cleanups

So far those were the last changes requested by the netfilter team for inclusion. Let’s the results.

Networking

Climbing to hell Morning exercise: port multithreaded project to pool of libevent-backed threads