Re: [Full-disclosure] p0f3 release candidate

2012-01-16 Thread Michal Zalewski
So just for the record, version 3.00 is now officially out: http://lcamtuf.coredump.cx/p03/. Many thanks to countless people who submitted signatures and bug fixes, including: Phil Ames Jason DePriest Dalibor Dukic Mark Martinec Damien Miller Nibbler Bernhard Rabe Chris John Riley

Re: [Full-disclosure] p0f3 release candidate

2012-01-16 Thread GloW - XD
Thanks mike, i use the old p0f, from freebsd ports collection so maybe time to checkout this new one eh :) thx MZ. drew On 17 January 2012 09:10, Michal Zalewski lcam...@coredump.cx wrote: So just for the record, version 3.00 is now officially out: http://lcamtuf.coredump.cx/p03/. Many

[Full-disclosure] p0f3 release candidate

2012-01-10 Thread Michal Zalewski
Hi folks, I wanted to share the news of p0f v3, a complete rewrite and redesign of my passive fingerprinting tool. == Synopsis == P0f is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP