Can signature analysis of DHCP client behaviour identify WinXP clients?

[Niall O'Reilly]

> On 9 Nov 2013, at 11:09, Łukasz Siemiradzki <lukasz.siemiradzki at gmail.com> wrote:
> 
> Ah sorry. I thought that the problem was to distinguish between windows and the rest.
> In this particular case you may try:
> http://lcamtuf.coredump.cx/p0f3/

Interesting.  Thanks!
Niall

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20131110/5791aff4/attachment.html>