On Monday 04 July 2005 13:26, WiFi wrote:
> Salut,
>
> exista vrea modalitate, reteta, prin care sa vad daca de la un anumit
> IP se face ICS, sau daca are un router, prin care sa distribuie net la
> n persoane?
> Intrebarea este cam puierila, cred, drept pt care rog a nu se arunca cu
> noroi. Multumesc!

Se poate folosi OS/network fingerprinting. Un tool destul de destept care 
exemplifica acest concept (in mod pasiv chiar) este P0f 
( http://lcamtuf.coredump.cx/p0f.shtml ).

<--- cut here --->
P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the 
operating system on:

   - machines that connect to your box (SYN mode),
   - machines you connect to (SYN+ACK mode),
   - machine you cannot connect to (RST+ mode),
   - machines whose communications you can observe.

P0f can also do many other tricks, and can detect or measure the following:

   - firewall presence, NAT use (useful for policy enforcement),
   - existence of a load balancer setup,
   - the distance to the remote system and its uptime,
   - other guy's network hookup (DSL, OC3, avian carriers) and his ISP.

All this even when the device in question is behind an overzealous packet 
firewall, when our favourite active scanner can't do much. P0f does not 
generate ANY additional network traffic, direct or indirect. No name lookups, 
no mysterious probes, no ARIN queries, nothing. How? It's simple: magic.
</--- cut here --->


Mihai


-- 
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/


--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui