Mark Martinec wrote:
Indeed. Also coupling it with p0f (passive operating system fingerprinting)
Good idea. Should have thought of that. :-)
About p0f see:
Those who like SQL might like the stuff at <http://whatever.frukt.org/p0fstats.text.shtml> wich includes my SpamAssassin plugin. :-) /Jonas -- Jonas Eckerman, FSDB & Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/