search

ValdikSS / p0f-mtu

p0f with patches to save MTU value and export it via API (for VPN detection)
https://medium.com/@ValdikSS/detecting-vpn-and-its-configuration-and-proxy-users-on-the-server-side-1bcc59742413
223 stars 63 forks source link

No matching host in p0f cache. That's all we know. #6

Open MartinCoh opened 1 year ago

MartinCoh commented 1 year ago

No matching host in p0f cache. That's all we know.

PTR test = Probably home user Fingerprint and OS match. No proxy detected (this test does not include headers detection). No OpenVPN detected.
Getting your NTLM hash…

Logs:

.-[ 83.192.13.12/65013 -> 185.172.228.228/443 (mtu) ]- server = 185.172.228.228/443 link = Ethernet or modem raw_mtu = 1500

`----

.-[ 83.192.13.12/65014 -> 185.172.228.228/443 (syn) ]- client = 83.192.13.12/65014 os = Mac OS X dist = 10 params = generic fuzzy tos:0x0a raw_sig = 4:54+10:0:1340:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:df:0

`----

.-[ 83.192.13.12/65014 -> 185.172.228.228/443 (mtu) ]- client = 83.192.13.12/65014 link = OpenVPN UDP bs128 SHA256 lzo raw_mtu = 1380

`----

.-[ 83.192.13.12/65014 -> 185.172.228.228/443 (syn+ack) ]- server = 185.172.228.228/443 os = ??? dist = 0 params = none raw_sig = 4:64+0:0:1460:mss*45,7:mss,sok,ts,nop,ws:df:0

`----

I don't understand why it keeps throwing this error. The cache DOES match the ip of the host. I'm not using cloudflare or any other caching. Running on Ubuntu 20.04.