intrigueio / intrigue-ident

Application and Service Fingerprinting
https://core.intrigue.io
Other
131 stars 40 forks source link

Moving Tcp check to IP checks #119

Closed shpendk closed 3 years ago

shpendk commented 3 years ago

This PR changes the previously merged PR for fingerprints over TCP. We've now moved a level lower to IP. The transport protocol must be specified in the fingerprint via protocol: :tcp or protocol: :udp. For fingerprint examples, see checks/ip/cisco_smart_install.rb and checks/ip/microsoft_rdp.rb in this PR also.

Currently a protocl must be specified. Im thinking to enable sending IP packets if a protocol is not specified. Thoughts?