Re: [Packetfence-devel] DHCP fingerprints

[David L. <da...@la...>]

We've noticed that there's often a "1" tagged on the front.  I'll add
some code to automagically do that so we don't have lots of
mostly-duplicate fingerprints in there.

As to the others, I'm not sure... Are they all similar?

Dave

Robert Kerr wrote:
> Hi,
> 
> I'm seeing several fingerprints here that don't match entries in the
> packetfence database:
> 
> 15,3,6,44,46,47,31,33,43
> 15,3,6,44,46,47,31,33,43,252
> 15,3,6,44,46,47,31,33,43,77
> 15,3,6,44,46,47,43,77	
> 
> 3 of them are the same as other fingerprints in the packetfence database
> only without option 1:
> 
> 1,15,3,6,44,46,47,31,33,43:Windows:Microsoft Windows 2000 Professional:N
> 1,15,3,6,44,46,47,31,33,43,77:Windows:Microsoft Windows ME:N
> 1,15,3,6,44,46,47,43,77:Windows:Microsoft Windows 98 SE:N
> 
> The remaining signature doesn't quite match anything - but all of the
> users are registered as having windows 2000, so I'd guess this is
> another windows 2000 fingerprint (different service pack maybe?).
> 

-- 
David LaPorte
da...@la...