SSL fingerprinting for p0f

from blog Marek's idea of the day, | ↗ original
17 June 201217 June 2012 In January In January Lcamtuf announcedLcamtuf announced a complete rewrite of his passive fingerprinting tool a complete rewrite of his passive fingerprinting tool p0fp0f. Historically p0f was a low-level tool focused on fingerprinting layer 4, mostly . Historically p0f was a low-level tool focused on fingerprinting layer 4, mostly SYNSYN and and SYN-ACKSYN-ACK TCP/IP packets. TCP/IP packets. The new version of p0f is different: not only it can look at low level packets, but...The new version of p0f is different: not only it can look at low level packets, but...