Satori

From Forensics Wiki
Jump to: navigation, search

Satori performs passive OS identification on any packets it sees. It can parse and utilize the following packet types: DHCP, TCP (syn and syn/ack), ICMP, SMB, CDP, plus many others. It can be found at http://chatteronthewire.org

Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox