On Fri, 19 Apr 2002, Chojin wrote:
> Each OS has his own fingerprint. By example, when sending a SYN|ACK|FIN|RST
> on a closed port, and user answers with RST, It's a Windows OS (because it
> doesn't follow the RFC).
That's OS finger printing, which will only tell you which OS
they're using (or rather which one they're likely to be using). It
doesn't identify a user. What's worse is it's invansive and wouldn't make
us very popular.
> I also heard MSS (Maximum Segment Size) is different for each user then it
> could be a sort of user fingerprint.
No dice.
> Chojin
--
Chris "_Shad0w_" Crowther
[EMAIL PROTECTED]
http://www.shad0w.org.uk/
