| pf.os (225452) | pf.os (244096) |
|---|---|
| 1# $FreeBSD: head/etc/pf.os 225452 2011-09-08 23:46:07Z delphij $ 2# $OpenBSD: pf.os,v 1.25 2010/10/18 15:55:27 deraadt Exp $ | 1# $FreeBSD: head/etc/pf.os 244096 2012-12-10 20:52:52Z delphij $ 2# $OpenBSD: pf.os,v 1.26 2012/08/03 12:25:16 jsg Exp $ |
| 3# passive OS fingerprinting 4# ------------------------- 5# 6# SYN signatures. Those signatures work for SYN packets only (duh!). 7# 8# (C) Copyright 2000-2003 by Michal Zalewski <lcamtuf@coredump.cx> 9# (C) Copyright 2003 by Mike Frantzen <frantzen@w4g.org> 10# --- 210 unchanged lines hidden (view full) --- 221 222 223S4:64:1:60:M1360,S,T,N,W0: Linux:google::Linux (Google crawlbot) 224 225S2:64:1:60:M*,S,T,N,W0: Linux:2.4::Linux 2.4 (big boy) 226S3:64:1:60:M*,S,T,N,W0: Linux:2.4:.18-21:Linux 2.4.18 and newer 227S4:64:1:60:M*,S,T,N,W0: Linux:2.4::Linux 2.4/2.6 <= 2.6.7 228S4:64:1:60:M*,S,T,N,W0: Linux:2.6:.1-7:Linux 2.4/2.6 <= 2.6.7 | 3# passive OS fingerprinting 4# ------------------------- 5# 6# SYN signatures. Those signatures work for SYN packets only (duh!). 7# 8# (C) Copyright 2000-2003 by Michal Zalewski <lcamtuf@coredump.cx> 9# (C) Copyright 2003 by Mike Frantzen <frantzen@w4g.org> 10# --- 210 unchanged lines hidden (view full) --- 221 222 223S4:64:1:60:M1360,S,T,N,W0: Linux:google::Linux (Google crawlbot) 224 225S2:64:1:60:M*,S,T,N,W0: Linux:2.4::Linux 2.4 (big boy) 226S3:64:1:60:M*,S,T,N,W0: Linux:2.4:.18-21:Linux 2.4.18 and newer 227S4:64:1:60:M*,S,T,N,W0: Linux:2.4::Linux 2.4/2.6 <= 2.6.7 228S4:64:1:60:M*,S,T,N,W0: Linux:2.6:.1-7:Linux 2.4/2.6 <= 2.6.7 |
| 229S4:64:1:60:M*,S,T,N,W7: Linux:2.6:8:Linux 2.6.8 and newer (?) | |
| 230 | 229 |
| 230S4:64:1:60:M*,S,T,N,W5: Linux:2.6::Linux 2.6 (newer, 1) 231S4:64:1:60:M*,S,T,N,W6: Linux:2.6::Linux 2.6 (newer, 2) 232S4:64:1:60:M*,S,T,N,W7: Linux:2.6::Linux 2.6 (newer, 3) 233T4:64:1:60:M*,S,T,N,W7: Linux:2.6::Linux 2.6 (newer, 4) 234 235S10:64:1:60:M*,S,T,N,W4: Linux:3.0::Linux 3.0 236 |
|
| 231S3:64:1:60:M*,S,T,N,W1: Linux:2.5::Linux 2.5 (sometimes 2.4) 232S4:64:1:60:M*,S,T,N,W1: Linux:2.5-2.6::Linux 2.5/2.6 233S3:64:1:60:M*,S,T,N,W2: Linux:2.5::Linux 2.5 (sometimes 2.4) 234S4:64:1:60:M*,S,T,N,W2: Linux:2.5::Linux 2.5 (sometimes 2.4) 235 236S20:64:1:60:M*,S,T,N,W0: Linux:2.2:20-25:Linux 2.2.20 and newer 237S22:64:1:60:M*,S,T,N,W0: Linux:2.2::Linux 2.2 238S11:64:1:60:M*,S,T,N,W0: Linux:2.2::Linux 2.2 --- 185 unchanged lines hidden (view full) --- 424S12:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows XP SP1 425S44:128:1:48:M*,N,N,S: Windows:2000:SP3:Windows Pro SP1, 2000 SP3 426S44:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows Pro SP1, 2000 SP3 42764512:128:1:48:M*,N,N,S: Windows:2000:SP3:Windows SP1, 2000 SP3 42864512:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows SP1, 2000 SP3 42932767:128:1:48:M*,N,N,S: Windows:2000:SP4:Windows SP1, 2000 SP4 43032767:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows SP1, 2000 SP4 431 | 237S3:64:1:60:M*,S,T,N,W1: Linux:2.5::Linux 2.5 (sometimes 2.4) 238S4:64:1:60:M*,S,T,N,W1: Linux:2.5-2.6::Linux 2.5/2.6 239S3:64:1:60:M*,S,T,N,W2: Linux:2.5::Linux 2.5 (sometimes 2.4) 240S4:64:1:60:M*,S,T,N,W2: Linux:2.5::Linux 2.5 (sometimes 2.4) 241 242S20:64:1:60:M*,S,T,N,W0: Linux:2.2:20-25:Linux 2.2.20 and newer 243S22:64:1:60:M*,S,T,N,W0: Linux:2.2::Linux 2.2 244S11:64:1:60:M*,S,T,N,W0: Linux:2.2::Linux 2.2 --- 185 unchanged lines hidden (view full) --- 430S12:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows XP SP1 431S44:128:1:48:M*,N,N,S: Windows:2000:SP3:Windows Pro SP1, 2000 SP3 432S44:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows Pro SP1, 2000 SP3 43364512:128:1:48:M*,N,N,S: Windows:2000:SP3:Windows SP1, 2000 SP3 43464512:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows SP1, 2000 SP3 43532767:128:1:48:M*,N,N,S: Windows:2000:SP4:Windows SP1, 2000 SP4 43632767:128:1:48:M*,N,N,S: Windows:XP:SP1:Windows SP1, 2000 SP4 437 |
| 4388192:128:1:52:M*,N,W2,N,N,S: Windows:Vista::Windows Vista/7 439 |
|
| 432# Odds, ends, mods: 433 434S52:128:1:48:M1260,N,N,S: Windows:2000:cisco:Windows XP/2000 via Cisco 435S52:128:1:48:M1260,N,N,S: Windows:XP:cisco:Windows XP/2000 via Cisco 43665520:128:1:48:M*,N,N,S: Windows:XP::Windows XP bare-bone 43716384:128:1:52:M536,N,W0,N,N,S: Windows:2000:ZoneAlarm:Windows 2000 w/ZoneAlarm? 4382048:255:0:40:.: Windows:.NET::Windows .NET Enterprise Server 439 --- 251 unchanged lines hidden --- | 440# Odds, ends, mods: 441 442S52:128:1:48:M1260,N,N,S: Windows:2000:cisco:Windows XP/2000 via Cisco 443S52:128:1:48:M1260,N,N,S: Windows:XP:cisco:Windows XP/2000 via Cisco 44465520:128:1:48:M*,N,N,S: Windows:XP::Windows XP bare-bone 44516384:128:1:52:M536,N,W0,N,N,S: Windows:2000:ZoneAlarm:Windows 2000 w/ZoneAlarm? 4462048:255:0:40:.: Windows:.NET::Windows .NET Enterprise Server 447 --- 251 unchanged lines hidden --- |