Re: [Packetfence-devel] More DHCP fingerprints.

[David L. <da...@la...>]

> 3,6,15,112,113,78,79,95,252:Macintosh:Max OS X:N
> should be                               ^
> 3,6,15,112,113,78,79,95,252:Macintosh:Mac OS X:N

done

> New fingerprints:
> 3,6,15,112,113,78,79,95:Macintosh:Mac OS:N
> 3,6,15,112,113,78,79,95,252,44,47:Macintosh:Mac OS X:N
> 3,6,12,15,17,23,28,29,31,33,40,41,42,119:Linux:Generic Linux:N
> 3,6,15,28,12,7,9,42,48,49:Linux:Debian Based Linux:N
> 15,3,6,44,46,47:Router:Linksys WRT54GS Wireless AP:N
> 28,2,3,15,6,12,44,47:Windows:Microsoft Windows XP:N
> 3,6,15:Routers:Netgear Router:N

added

> Has anoyone seen either of these? I haven't identified them yet.
> 15,3,6,44,46,47,43,77,252 (3com PCI card)
> 6,54,69,42,50,4,3,51,12,116 (3com europe - may be wireless AP?)

the first one looks very similar to:
15,3,6,44,46,47,43,77:Windows:Microsoft Windows 98 SE:N

I've seen a few other windows fingerprints that differ only by the 252
suffix, so I'd bet that's it.  Want me to add it as that?

The second one is interesting - I don't have a clue...

thanks!
Dave

-- 
David LaPorte
da...@la...