Disco is a passive IP discovery and fingerprinting utility
designed to sit on segments distributed throughout a network to
discover unique IP's on the network. In addition to IP
discovery disco has the ability to passively fingerprint TCP
SYN packets. The intention is for disco to discover IP's on the
network, fingerprint the packet if necessary, and load into the
Gherkin Scan Manager database for targeted host scans.
WWW: http://www.altmode.com/disco
Say hello to the new "net-mgmt" category. There are probably more
ports that belong here than the ones I have identified and moved in
this, first, pass.
Approved in principle by: marcus
Update to 1.2
* Added option to fingerprint SYNACK packets
* Added option to output more verbose fingerprint
info to outfile
* Added a ton of new fingerprints (1214 SYN/SYNACK
fingerprints)
* Added option to run Disco on interfaces without an assigned
IP
Approved by: fjoe (mentor) (implicit)