OS fingerprinting, both passive and active, has many uses in network security, forensics, and intrusion detection and prevention. A new tool, SYNSCAN, has been developed to make OS fingerprinting more accurate by providing more information about the remote network stack implementation.Greg will be describing this tool and it's applications in network security and specifically for uses with intrusion detection and prevention.