Satori

From Forensics Wiki
Jump to: navigation, search

Satori performs passive OS identification on any packets it sees. It can parse and utilize the following packet types: DHCP, TCP (syn and syn/ack), ICMP, SMB, CDP, plus many others. It can be found at http://chatteronthewire.org