NikolaiT/zardaxt: Passive TCP/IP Fingerprinting Tool ... - GitHub
: Variable values like dynamic IP IDs or volatile ports are scrubbed, turning the packet into a standardized signature.
The Zardaxt framework on GitHub hooks into the socket layer to extract the exact TCP/IP fields from the initial SYN packet.
(using pew ):
+-------------------------------------------------------+ | Initial TCP SYN Packet | +-------------------------------------------------------+ | v +-------------------------------------------------------+ | Extract Fields: TTL, Window Size, TCP Options, MTU | +-------------------------------------------------------+ | v +-------------------------------------------------------+ | Zardaxt.py Processing & Normalization | +-------------------------------------------------------+ | v +-------------------------------------------------------+ | Output: Zardaxt OS Scores (Android 57%, Linux 44%) | +-------------------------------------------------------+ The Anatomy of a TCP/IP Fingerprint
| Endpoint URL | Function | | :--- | :--- | | http://0.0.0.0:8249/classify | : Returns a JSON object with the OS classification scores. | | http://0.0.0.0:8249/classify?detail=1 | Returns detailed fingerprints of the network signature for analysis. | | http://0.0.0.0:8249/classify?by_ip=1 | Obtains the fingerprint for an internal request. |
A managed-service provider issues scoring links after nightly scans. Support engineers open a ticket, click the link, verify the signature, and immediately see the failing checks (IDs) and recommended fixes — enabling a one-click remediation flow tied to automation.
: The amount of data a host can receive before needing an acknowledgment.
The arrangement and presence of options like Maximum Segment Size (MSS), Selective Acknowledgments (SACK), Timestamps, and No-Operation (NOP) padding. The exact layout varies by OS version. How the Zardaxt OS Scoring Engine Works
To get your own zardaxt os scoring link running today, follow this installation and setup guide.
Many optimization enthusiasts maintain a "Master Scoring Sheet" that compares various OS builds. Searching for "OS Optimization Leaderboard" on tech forums will often lead you to the current Zardaxt scores. Why Your Score Matters
Verification pseudocode:
curl 'https://tcpip.incolumitas.com/classify?by_ip=1'