Know Your Enemy: Passive Fingerprinting

SmartNA PortPlus - High Performance Visibility Solutions that scale with your network.

This paper details how to passively learn about the enemy, without them knowing about it. Specifically, how to determine the operating system of a remote host using passive sniffer traces only.

Read the paper in HTML format here.