LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 12-06-2006, 09:22 AM   #1
stringZ
Member
 
Registered: Dec 2006
Posts: 42

Rep: Reputation: 15
How can I hide P0F (OS fingerprint) under linux 2.4?


Hey guys!

I've been looking for a soultion for hiding my computer's TCP Fingerprint which
allows the others to determine whether what OS I'm using (Passive OS Fingerprinting, p0f), what's its uptime, etc.
I'm not talking about I want ONLY to block people who want to fingerprint me, or block the script kiddies or someone who uses nmap.
I want to somehow rewrite the package headers, so if I login to another server
they shouldn't be able to understand my fingerprint (e.g. using the p0f application: http://lcamtuf.coredump.cx/p0f.shtml).
Is there any solution for this problem (e.g. a kernel patch) under linux (2.4)?

Thanks
stringZ
 
Old 12-06-2006, 10:14 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
A practical approach for defeating Nmap OS-Fingerprinting.
 
Old 12-06-2006, 12:03 PM   #3
stringZ
Member
 
Registered: Dec 2006
Posts: 42

Original Poster
Rep: Reputation: 15
unSpawn: Thank you for your answer, but as I've told, it's not nmap what i wanna "defeat", but passive os fingerprinting (look at http://lcamtuf.coredump.cx/p0f.shtml). It's similar, but not exactly the same. Nmap can be fooled by a single grsecurity patch... but p0f not...
 
Old 12-06-2006, 04:40 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
So you actually read the article and tried IP Personality against the p0f help page?
 
Old 12-07-2006, 04:28 PM   #5
stringZ
Member
 
Registered: Dec 2006
Posts: 42

Original Poster
Rep: Reputation: 15
Since it's for 2,4,18 and I have 2.4.33 I won't be able to try it, but I understand what it wants me to do and I think it won't defeat p0f. Tell me if I'm wrong.

Still looking for solution...
 
Old 12-08-2006, 05:14 AM   #6
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
Did you really read the document? and for example search for p0f inside?
If you want to do this sort of strange things (which are not out of consequence for performance or other things) then you should probably know how to apply a patch aimed at a version to another version, you have to correct the reject files so it should be possible (I'm not patronizing you, I just mean that you are doing some network kernel hacking then its not easy stuff and you have to understand what you do)
Btw, there are other private tools floating around and I'm not 100% sure you will defeat them.
What's the point to do this anyway?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Fingerprint scanner support in Linux jineshkj Linux - Kernel 11 12-05-2006 09:46 AM
Microsoft Fingerprint Reader, linux compatible? jspaceman Linux - Hardware 1 06-15-2006 03:22 PM
p0f phatbastard Linux - Security 2 11-08-2004 02:37 PM
fingerprint sensors with sdk in linux gsm Linux - Hardware 1 05-14-2004 02:46 AM
fingerprint sensors FREE/Chep SDK for linux gsm Linux - General 1 05-14-2004 02:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration