p0f
Passive OS/network fingerprinting.
KaliParrotLinuxpassive
pkg: p0f
p0f identifies OSes and links by passively observing traffic — zero packets sent.
Syntax
p0f -i {iface}
Example
p0f -i eth0
Fingerprints hosts from traffic it sees, without probing.
Advantages
- Completely passive/stealthy
- OS + uptime + NAT detection
Disadvantages
- Needs traffic visibility
- Signature DB ages
Tags
#fingerprint#passive
Official docs: p0f ↗
Related commands
Frequently asked questions
What is p0f used for?
p0f identifies OSes and links by passively observing traffic — zero packets sent.
What is an example p0f command?
A common example is: p0f -i eth0 — Fingerprints hosts from traffic it sees, without probing.
Is p0f part of Kali Linux?
Yes. p0f ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install p0f.
What category of security tool is p0f?
p0f is a Information Gathering tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.