Tools used for OS Fingerprinting.

It is one of the best method to dive in other system and retrieve the information. Atleast better then the dumbster diving. I am giving the list of the tools, which you can use to perform OS fingerprinting. Go ahead and experiment. Your comments are important for me.

• PRADS – Passive comprehensive TCP/IP stack fingerprinting and service detection.
• Ettercap – passive TCP/IP stack fingerprinting.
• NetworkMiner – passive DHCP and TCP/IP stack fingerprinting (combines p0f, Ettercap and Satori databases)
• Nmap – comprehensive active stack fingerprinting.
• p0f – comprehensive passive TCP/IP stack fingerprinting.
• PacketFence – PacketFence is an open-source network access control (NAC) system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless integration and DHCP fingerprinting.
• Satori – passive CDP, DHCP, ICMP, HPSP, HTTP, TCP/IP and other stack fingerprinting.
• SinFP – single-port active/passive fingerprinting.
• XProbe2 – active TCP/IP stack fingerprinting.