.\" $Id: xprobe.1,v 1.6 2001/10/14 18:48:01 fygrave Exp $ */
.\"
.\" Copyright (C) 2001 Fyodor Yarochkin <fygrave@tigerteam.net>,
.\"                    Ofir Arkin       <ofir@sys-security.com>
.\"
.\" This program is free software; you can redistribute it and/or modify
.\" it under the terms of the GNU General Public License as published by
.\" the Free Software Foundation; either version 2 of the License, or
.\" (at your option) any later version.
.\"
.\" All material for nonprofit, educational use only.
.\"
.\" This program is distributed in the hope that it will be useful,
.\" but WITHOUT ANY WARRANTY; without even the implied warranty of
.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
.\" GNU General Public License for more details.
.\"
.\" You should have received a copy of the GNU General Public License
.\" along with this program; if not, write to the Free Software
.\" Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
.\"

.\" Generate man page: groff -man -Tascii xprobe.1 

.TH XPROBE2  "$Id$"
.SH NAME
xprobe2 \-   primary icmp based fuzzy OS fingerprinting tool.
.SH SYNOPSIS
.na
.B xprobe2
[
.B \-v
] [
.B \-i
.I interface
] [
.B \-o
.I logfile
] [
.B \-p
.I port
] [
.B \-t
.I receive\_timeout
]
.I host
 [
.I/ netmask
]
.br
.ad
.SH DESCRIPTION
.LP
\fIx probe2\fP is a tool for remote OS fingerprinting based on ICMP
responses, received from the host.
.LP
You must have a
.B root
privelege in order to run \fIx probe2\fP.
.SH OPTIONS
.TP
.B \-v
be verbose.
.TP
.B -i
use \fIinterface\fP to listen for responses (have to use it, if not
detected automatically).
.TP
.B -o
use \fIlogfile\fP to log everything. (default - stderr).
.TP
.B -p
use udp \fIport\fP number to send udp query. (remote host should
.B NOT
listen to this port.
.TP
.B -t
set receive timeout to \fIreceive\_timeout\fPi in seconds. (default: 10 seconds).
.SH EXAMPLES
.LP
.RS
.nf
\fBxprobe -v -i lo0 -p 31337 localhost\fP
.fi
.RE
.RS
.nf
\fBxprobe -p 53 192.168.1.0/24\fP
.fi
.RE
.

.SH HISTORY
Xprobe has been developed in 2001 based  on research performed by Ofir
Arkin <ofir@sys-security.com>. The code has been officially released on
BlackHat Briefings in Las-Vegas in 2001. Xprobe2 is a logical evolution of
xprobe code. Signature based fuzzy fingerprinting logic was embedded.
.SH "SEE ALSO"
nmap(1) queso(1) pcap(3)
.SH AUTHORS
Fyodor Yarochkin <fygrave@tigerteam.net>, Ofir Arkin <ofir@sys-security.com>
.PP
(see also CREDITS in distro tarball).
.SH AVAILABILITY
The current version and relevant documentation is available from following urls:
.br
.I http://www.sys-security.com/html/projects/X.html
.br
.I http://xprobe.sourceforge.net
.br
.I http://www.notlsd.net/xprobe/
.SH BUGS
None known (please report). Just this man page is outdated ;-)


