远程操作系统探测技术的研究

Research on the Technology of Remote Operating System Detection

从传统技术和高级特征探测技术2方面详细地介绍了操作系统探测原理与方法。传统方法中简要介绍了远程登陆标识、抓取文件传输协议标识和http头部3种方法。重点分析了高级特征探测技术,其中又分为主动协议栈技术和被动协议栈技术。文章结合实践,从perl编程角度深入讨论了远程探测操作系统的3种方法,并且归纳总结了它们各自的优缺点,系统地给出了其中2种方法的工作示意图。

From both traditional and advanced points of view.this paper primarily introduces the theory and technology of remote OS (operating systems) detection. This paper simply introduces three traditional methods, which are Telnet Banner Grabbing,FTP Banner Grabbing and HTTP header,and pays emphases on the advanced character detection technology, including active protocol stack and passive protocol stack. From theory to practice,this paper thoroughly discusses three kinds of technology about remote OS detection with the Perl program,summarizes their advantages and disadvantages,and generalizes two of the methods,expressed in sketch.