Abstract: Determining an attribute of a target computer is disclosed. A first ICMP query is set to a first state. A second ICMP query is set to a second state. The first and second ICMP queries are sent to the target computer. Responses associated with the first and second ICMP queries that are received from the target computer are combined. An attribute of the target computer is determined based on the combination of the responses.
Abstract: Determining the operating system of a target computer is disclosed. Subject information describing one or more attributes of the target computer is received. Reference information describing one or more attributes of a reference is received. The subject information is compared with the reference information. A score associated with the comparison is determined.