Re: Application-based fingerprinting ?

From: Chris Reining (creining@packetfu.org)
Date: 02/04/03

  • Next message: Bill Pennington: "Re: Application-based fingerprinting ?" 
    Date: Tue, 4 Feb 2003 13:55:52 -0600
From: Chris Reining <creining@packetfu.org>
To: Anders Thulin <Anders.Thulin@kiconsulting.se>

    On Tue, Feb 04, 2003 at 08:22:02AM +0100, Anders Thulin wrote:
    > Have there been any attempts to explore this area further?
    > I've googled around, but not found anything obvious, except
    > for observations of some fingerprints, such as responses to
    > DNS SERVER_STATUS_REQUEST (a few respond with something else
    > than 'not implemented'), and so on.

    Two that I have found useful are:

    ftpmap http://www.jedi.claranet.fr/
    smtpscan http://www.greyhats.org/outils/smtpscan/