Skip to content

Commit ec200e8

Browse files
Nisitaygpotter2
andauthored
p0fv3 support - tcp/http/mtu passive fingerprinting (secdev#3259)
* p0fv3 support - tcp/http/mtu passive fingerprinting * Changed the kb structure, added parsing for 'sys' lines and more detailed signature structure. * Added p0fv3 tests and modified the p0fv2 tests to fit new module name * Added prnp0f function and sig2str to convert a tuple signature to str * Added MTU fingerprinting in prnp0f on SYN/SYN+ACK packets * Fixed HTTP headers_correl function and reverted mtu changes * Fixed IP ECN parsing * Fixed TCP ECN parsing * Fixed tests * Changed signature & record tuples to organized classes * Added p0f_impersonate + tests * Fix typo Co-authored-by: gpotter2 <[email protected]>
1 parent 3644812 commit ec200e8

File tree

4 files changed

+1695
-615
lines changed

4 files changed

+1695
-615
lines changed

0 commit comments

Comments
 (0)