P0f is a tool that utilizes an array of sophisticated, purely passive traffic analysis mechanisms to identify the players behind any incidental TCP/IP connections (often as little as a single normal SYN) without interfering in any way. The tool can be operated in the foreground or as a daemon, and offers a simple real-time API for third-party components that wish to obtain additional information about the actors they are talking to. Common uses for p0f include reconnaissance during penetration tests; routine network monitoring; detection of unauthorized network interconnects in corporate environments; providing signals for abuse-prevention tools; and miscellaneous forensics.
Version History
Packages are not hosted on our server, they could be protected or unavailable.
