It's a good idea for a network security pro to know how to validate which endpoints are establishing connections...
to key enterprise systems, and passive fingerprinting is a great way to find out.
P0f is a free collection of passive OS fingerprinting tools you can use to fingerprint any OSes connecting to or from your system, as well as firewalls, IDSes or honeypots for even greater visibility.
Want more demos of free security tools? Visit our screencast page.
About the presenter:
Peter Giannoulis, GSEC, GCIH, GCIA, GCFA, GCFW, GREM, CISSP, is an information security consultant in Toronto, Ontario. He currently maintains The Academy Pro, which provides streaming video for enterprises and consumers on how to configure and troubleshoot many of today's top security products. He also serves as a technical director for GIAC.