ARP idea developments

[photon <photon () linux kgs com au>]

Following my post, I recalled a thread a while back that I
think Fyodor killed because he wanted nmap to stay
independant of link-layers.  (I don't save anything so I
can't be sure ;) ...

Anyway, I've decided that if one has link-layer access there
is plenty one can do to determine remote OS in both switched
and non-switched environments.   Therefore, I've decided
that I'll work on a piece of software to accomplish both
passive link-layer monitoring to determine remote OSs +
other information (eg: known open TCP ports o'er the
monitoring period), and active link-layer solicitation of
characteristics.

The latter will be far more interesting, and that's what
I'll concentrate on.  If you'd like to be informed on the
development of this project I'll put the website up @
http://sik.kuntz.org/photon/ shortly, possibly with a
mailing list *shrug*.  Bear in mind my C skills are
pathetic, and I have no time for about 2 months ..
developers welcome ;)

- pho