p0f is a passive TCP/IP stack fingerprinting tool. p0f can attempt to identify the system running on machines that send network traffic to the box it is running on, or to a machine that shares a medium with the machine it is running on. p0f can also assist in analysing other aspects of the remote system.
Wikidata facts
- Official website
- lcamtuf.coredump.cx/p0f3
- Image
- P0f.png
Show 2 more facts
- inception
- 2000-00-00
- software version identifier
- 3.09b
Sources (1)
via Wikidata · CC0
~2 min read
Article
4 sectionsContents
- Overview
- Usage
- References
- External links
p0f is a passive TCP/IP stack fingerprinting tool. p0f can attempt to identify the system running on machines that send network traffic to the box it is running on, or to a machine that shares a medium with the machine it is running on. p0f can also assist in analysing other aspects of the remote system.
== Overview == By inspecting network traffic passively, p0f can attempt to identify the operating systems on remote machines that send TCP packets to the detecting machine's network interface, or to a physical subnet that the detecting machine can listen on. Since version 3, p0f is also able to deduce aspects of the remote system by inspecting application-level HTTP messages.