full-disclosure - Re: [tool] the new p0f 2.0.1 is now out

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.42.0309042201380.630-100000@nimue.bos.bindview.com>
From: lcamtuf at ghettot.org (Michal Zalewski)
Subject: Re: [tool] the new p0f 2.0.1 is now out

On Thu, 4 Sep 2003, Parker, Jeff (MSE) wrote:

> Regarding detecting a machine with p0f installed/running, you may have
> better success simply trying to detect for any network adapter in
> promiscuous mode.  And there's tons of info available on that...

Yup, but p0f does not default to promisc mode anymore (for performance
reasons and so on).

-- 
------------------------- bash$ :(){ :|:&};: --
 Michal Zalewski * [http://lcamtuf.coredump.cx]
    Did you know that clones never use mirrors?
--------------------------- 2003-09-04 22:01 --