p0f

p0f#

Passive OS / network fingerprinting.

$ sudo p0f -i eth0
$ sudo p0f -r capture.pcap
$ sudo p0f -i eth0 -o p0f.log