Revision bf4b2596
Added by Jim Pingle about 13 years ago
etc/pf.os | ||
---|---|---|
1 |
# $FreeBSD: src/etc/pf.os,v 1.4 2006/10/23 05:09:44 delphij Exp $
|
|
2 |
# $OpenBSD: pf.os,v 1.21 2006/07/28 21:51:12 david Exp $
|
|
1 |
# $FreeBSD: src/etc/pf.os,v 1.4.10.2 2011/09/22 01:13:40 delphij Exp $
|
|
2 |
# $OpenBSD: pf.os,v 1.25 2010/10/18 15:55:27 deraadt Exp $
|
|
3 | 3 |
# passive OS fingerprinting |
4 | 4 |
# ------------------------- |
5 | 5 |
# |
... | ... | |
299 | 299 |
# ----------------- OpenBSD ----------------- |
300 | 300 |
|
301 | 301 |
16384:64:0:60:M*,N,W0,N,N,T: OpenBSD:2.6::NetBSD 1.3 (or OpenBSD 2.6) |
302 |
16384:64:1:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.0-4.0::OpenBSD 3.0-4.0
|
|
303 |
16384:64:0:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.0-4.0:no-df:OpenBSD 3.0-4.0 (scrub no-df)
|
|
302 |
16384:64:1:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.0-4.8::OpenBSD 3.0-4.8
|
|
303 |
16384:64:0:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.0-4.8:no-df:OpenBSD 3.0-4.8 (scrub no-df)
|
|
304 | 304 |
57344:64:1:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.3-4.0::OpenBSD 3.3-4.0 |
305 | 305 |
57344:64:0:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.3-4.0:no-df:OpenBSD 3.3-4.0 (scrub no-df) |
306 | 306 |
|
307 | 307 |
65535:64:1:64:M*,N,N,S,N,W0,N,N,T: OpenBSD:3.0-4.0:opera:OpenBSD 3.0-4.0 (Opera) |
308 | 308 |
|
309 |
16384:64:1:64:M*,N,N,S,N,W3,N,N,T: OpenBSD:4.9::OpenBSD 4.9 |
|
310 |
16384:64:0:64:M*,N,N,S,N,W3,N,N,T: OpenBSD:4.9:no-df:OpenBSD 4.9 (scrub no-df) |
|
311 |
|
|
309 | 312 |
# ----------------- Solaris ----------------- |
310 | 313 |
|
311 | 314 |
S17:64:1:64:N,W3,N,N,T0,N,N,S,M*: Solaris:8:RFC1323:Solaris 8 RFC1323 |
... | ... | |
362 | 365 |
# ----------------- Windows ----------------- |
363 | 366 |
|
364 | 367 |
# Windows TCP/IP stack is a mess. For most recent XP, 2000 and |
365 |
# even 98, the pathlevel, not the actual OS version, is more |
|
368 |
# even 98, the patchlevel, not the actual OS version, is more
|
|
366 | 369 |
# relevant to the signature. They share the same code, so it would |
367 | 370 |
# seem. Luckily for us, almost all Windows 9x boxes have an |
368 | 371 |
# awkward MSS of 536, which I use to tell one from another |
Also available in: Unified diff
Update pf.os a bit