[Bro-Dev] #323: State of passive fingerprinting signatures?

[Bro Tracker]

#323: State of passive fingerprinting signatures?
----------------------+------------------------
  Reporter:  robin    |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  Normal   |  Milestone:
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:
----------------------+------------------------
Changes (by seth):

 * milestone:  Bro1.6 =>


Comment:

 It looks like p0f hasn't been updated since 2006 and the signatures are
 starting to get quite out of date.  I'm thinking we should just remove any
 milestones from this ticket and come back to it later.

 It may be that ultimately the p0f code is just removed, it's really too
 unreliable to be of much use to anyone now in my opinion but it could be
 improved with SYN/ACK and RST modes but the database would still need to
 be updated and expanded by someone taking over the p0f project still.

 I'm going to remove the milestone from this ticket, but anyone should feel
 free to put it back if you plan to address p0f in Bro.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/323#comment:2>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker