1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
.Dd 2001-04-03
.Dt QUESO.CONF 5
.Os "Debian GNU/Linux"
.\" Manual page created by Guus Sliepen <guus@sliepen.warande.net>
.Sh NAME
.Nm queso.conf
.Nd Database of operating systems and their TCP implementation characteristics.
.Sh DESCRIPTION
The file
.Pa /etc/queso.conf
contains a list of operating systems followed by the description of the
response they give upon receiving certain TCP datagrams.
.Sh LAYOUT
Lines beginning with
.Li ;
are considered comments and are ignored.
.Pp
Lines beginning with
.Li *
denote the start of the description of an operating system. Lines which begin with
.Li *
are followed by the name of the operating system. This line is printed verbatim
if it is matched. Up to seven lines of the following format may follow:
.Bd -ragged
.Ar n s a w f
.Ed
.Bl -tag -width indent
.It Ar n
A number ranging from 0 to 6. Indicated the type of probe that was sent.
.Bl -tag -width indent
.It 0
SYN
.It 1
SYN+ACK
.It 2
FIN
.It 3
FIN+ACK
.It 4
SYN+FIN
.It 5
PSH
.It 6
SYN+XXX+YYY
.El
.It Ar s
Indicates whether the sequence number matches or not. Can be 1 or 0.
.It Ar a
Indicates whether the acknowledgement number matches or not. Can be 1 or 0.
.It Ar w
Indicates whether the window size is different or not. Can be 1 or 0, or a
hexadecimal number indicating which window size to expect on the response packet.
.It Ar f
Indicates which flags are set on the response packet.
.Bl -tag -width indent
.It S
SYN
.It F
FIN
.It R
RST
.It A
ACK
.It P
PSH
.It U
URG
.It X
.It Y
.El
.El
.Pp
To indicate that a host does not respond at all to a certain type of probe,
specify the following line:
.Bd -ragged
.Ar n
- - - -
.Ed
.Sh EXAMPLE
.Bd -literal
;The following block matches a generic Linux host.
* Linux 2.1.xx/2.2.xx
0 1 1 7FB8 SA
1 0 0 0 R
2 - - - -
3 0 0 0 R
4 1 1 7FB8 SA
5 - - - -
6 1 1 7FB8 SA
.Ed
.Sh FILES
.Pa /etc/queso.conf
.Sh SEE ALSO
.Xr queso 8
.Sh AUTHOR
This manual page was written by
.An Guus Sliepen Aq guus@sliepen.warande.net
for the Debian GNU/Linux system.
|
