Changes for version 1.00 - 2006-03-13

  • sinfp.db: more signatures (IPv4 and IPv6 ones)
  • sinfp.db: migration from DBD::SQLite 1.08 to 1.11
  • Makefile.PL: now installs sinfp.db into /usr/local/share/sinfp when installation is run as root
  • Makefile.PL: sinfp.pl, np-anon-pcap.pl, np-read-anon.pl are installed into /usr/local/bin if installation is run as root
  • SinFP: algorithm to match OSFPs is now quicker (especially in passive mode)
  • SinFP: algorithm to match OSFPs is now also a little better
  • SinFP: bugfix when running in offline passive mode (now skip non IP frames)
  • sinfp.pl: -k parameter to keep generated pcap file (default to not) pcap files are especially useful for unknown fingerprints, send them to me ;) (use np-anon-pcap.pl to anonymize IPs)

Modules

a Perl module to do OS fingerprinting
IpVersion SQL table
Os SQL table
OsVersion SQL table
OsVersionChildren SQL table
PatternBinary SQL table
PatternTcpFlags SQL table
PatternTcpMss SQL table
PatternTcpOptions SQL table
PatternTcpWindow SQL table
Signature SQL table
SystemClass SQL table
Vendor SQL table
IPv4 OS fingerprinting
IPv6 OS fingerprinting