[94995] in North American Network Operators' Group
RE: botnets: web servers, end-systems and Vint Cerf
daemon@ATHENA.MIT.EDU (Daniel J McDonald)
Fri Feb 16 12:39:28 2007
From: Daniel J McDonald <dan.mcdonald@austinenergy.com>
To: michael.dillon@bt.com
Cc: nanog@merit.edu
In-Reply-To: <2DA00C5A2146FB41ABDB3E9FCEBC74C101066F5E@i2km07-ukbr.domain1.systemhost.net>
Date: Fri, 16 Feb 2007 11:36:10 -0600
Errors-To: owner-nanog@merit.edu
On Fri, 2007-02-16 at 16:27 +0000, michael.dillon@bt.com wrote:
>
> Has anyone implemented a tool that ISPs could use to detect whether or
> not a NAT/firewall device is present? Perhaps based on OS
> fingerprinting?
Yes, p0f detects when hosts are behind a nat gateway.
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
Austin Energy
http://www.austinenergy.com
