> > You mean maybe like their processor serial/mac address/OS id? > > > > Each OS has his own fingerprint. By example, when sending a SYN|ACK|FIN|RST > on a closed port, and user answers with RST, It's a Windows OS (because it > doesn't follow the RFC).
That only tells you what type of OS it is. It also takes probing the system to figure it out. Moreover, some OS's have similiar "fingerprints." This *isn't* the way to accomplish what you want, trust me. > I also heard MSS (Maximum Segment Size) is different for each user then it > could be a sort of user fingerprint. Nope, sorry, that won't do the trick either. -- Kevin L. Mitchell <[EMAIL PROTECTED]>