Re: Update pf.os with newer OS fingerprints

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Feb 08, 2019 at 05:25:38PM +0100, Fernando Fernandez Mancera wrote:
[...]
> On 2/8/19 5:07 PM, Pablo Neira Ayuso wrote:
[...]
> > On Fri, Feb 08, 2019 at 03:06:00PM +0100, Fernando Fernandez Mancera wrote:
[...]
> >> +S20:64:1:60:M*,S,T,N,W7:	Linux:3.11-3.19::Linux 3.11 - 3.19
> >> +S20:64:1:60:M*,S,T,N,W7:	Linux:4.0-4.19::Linux 4.0 - 4.19
> > 
> > Probably merge these two lines above? ie.
> > > S20:64:1:60:M*,S,T,N,W7:	Linux:3.11-4.19::Linux 3.11 - 4.19
> > 
> 
> I split this one by following the pattern of similar situations for
> other fingerprints. eg.
> 
> 16384:64:1:44:M*:		FreeBSD:2.0-2.2::FreeBSD 2.0-4.2
> 16384:64:1:44:M*:		FreeBSD:3.0-3.5::FreeBSD 2.0-4.2
> 16384:64:1:44:M*:		FreeBSD:4.0-4.2::FreeBSD 2.0-4.2
> 
> 65535:64:1:60:M*,N,W1,N,N,T:	FreeBSD:4.7-4.11::FreeBSD 4.7-5.2
> 65535:64:1:60:M*,N,W1,N,N,T:	FreeBSD:5.0-5.2::FreeBSD 4.7-5.2
> 
> In my opinion I would make no changes to these two lines. Do you agree?

That's fine. Thanks for explaining.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux