• complete rewrite
• sinfp.db completely reworked
• new tests based on comparison between probe and response (TCP seq/ack comparison, IP ID value comparison)
• new matching algorithm, works like a search engine (a problem of finding intersection, by applying a deformation mask on keywords) much more efficient than in 1.xx branch
• passive fingerprinting much more acurate thanks to new matching algorithm
• possibility to launch P1P2P3 probes, or only P1P2 probes, or only P2 probe
• match IPv6 signatures against IPv4 ones
• API changes, not compatible with 1.xx version anymore
• DB schema changes, not compatible with 1.xx version anymore
• many bugfixes

Back to Previous Page