\r\n"; $subject = "rbeverly.net/research/finger/finger.php error notification"; $mailer = "X-Mailer: PHP/".phpversion(); if (@mail($mailto, $subject, $message, $from . $mailer)) { echo("

** admin notified. check back in a few hours.
"); } else { echo("

mailto error.

"); } } ?> Robust Classifier for TCP/IP Fingerprinting Robust Classifier for TCP/IP Fingerprinting

This web page attempts to determine your host's operating system based on the TCP/IP "signature." It analyzes the packet headers of the HTTP GET request from your host. This technique is known as TCP/IP fingerprinting and has applications in intrusion detection, NAT detection and Internet modeling. In contrast to rule-based approaches, we use a Bayesian Classifier to probabilistically determine the most likely operating system. By accessing this page, you are helping us better train our classifier. Additional background.

HTTP Information:

\n"; echo "Time: ".date("r")."
\n";; echo "Agent: $http_agent
\n"; echo "Agent OS: $agent

\n"; ?>

Identifying (Rule-based):
\n"; $p0fout = $line; if (stristr($line, "unknown")) $notfound = 1; if (stristr($line, $agent)) $foundagent = 1; } if ($error){ echo "Unix error code: $error
\n"; mailErr("Unix error code: $error \n"); } if ($notfound) { echo "
Rule-based method fails to identify your machine!\n"; $rule_correct = 0; } else if ($foundagent) { echo "Correct Guess (Consistent with HTTP agent).\n"; $rule_correct = 1; } else { echo "
Guess inconsistent with HTTP agent.\n"; echo "
Please send us your host information below.\n"; $rule_correct = 0; } ?>
Identifying (Bayesian Classifier):
\n"; } if ($error){ echo "Unix error code: $error
\n"; mailErr("Unix error code: $error \n"); } if ($nomatch) { echo "Error: I couldn't find the SYN from $ip.
\n"; mailErr("Couldn't find the SYN from $ip \n"); } else if (stristr($line1, $agent)) { echo "Correct Guess (Consistent with HTTP agent).\n"; $class_correct = 1; } else { echo "
Guess inconsistent with HTTP agent.\n"; echo "
Please send us your host information below.\n"; $class_correct = 0; } ?>
Feedback:

We are using this data to train our classifier. If the classifier incorrectly identified your system, please help us by filling in the following fields. Thanks!

Operating System:
OS Version:
OS/TCP Modifications:

2004-01-24