Hey, thanks alot all of you who went to http://orbitz.dyn.dhs.org/test.php. For those of you wondering why the heck I'd ask a such a thing, here is an explination. A friend of mine got a cool (but I'm assuming not very new idea) for passive OS detection through version strings on network software, in this case web browsers. What the php script does is log all of your version (User-Agent header) strings to a file, then by doing some greps and sort I create a wonderful list of all the strings. Then I use a perl script i made to convert the version strings to snort (www.snort.org) rule sets. So now when people visit http://orbitz.dyn.dhs.org/ and they are using a web browser in my data base, I can log what OS, web browser, and whatelse is in the header. So the bigger the database, the more people I can pick up. Its a pretty cool idea I think. There are other ways (probably simpler and more efficient) of doing this. Such as possible an apache mod. Thanks again, Orbitz
On Thu, Feb 15, 2001 at 04:59:28PM +0000, Doctor Orbitz wrote:
Hey, thanks alot all of you who went to http://orbitz.dyn.dhs.org/test.php.
Proof positive that people can be helpful when you make it insanely easy for them! ;) -Chuck
participants (2)
-
Chuck Homic
-
Doctor Orbitz