nfnl_osf(8)

nfnl_osf8

Os fingerprint loader utility

Usage

nfnl_osf -f fingerprints [-d]

Overview

The nfnl_osf utility allows one to load a set of operating system signatures into the kernel for later matching against using iptables' osf match.

Options

-f fingerprints

Read signatures from file fingerprints.

-d

Instead of adding the signatures from fingerprints into the kernel, remove them.

Exit status

Exit status is 0 if command succeeded, otherwise a negative return code indicates the type of error which happened:

-1

Illegal arguments passed, fingerprints file not readable or failure in netlink communication.

-ENOENT

Fingerprints file not specified.

-EINVAL

Netlink handle initialization failed or fingerprints file format invalid.

Files

An up to date set of operating system signatures can be downloaded from http://www.openbsd.org/cgi-bin/cvsweb/src/etc/pf.os .

Releases

7 releases since Debian 8 (Jessie); the text changed 5 times.

  1. 8–9
  2. 10
  3. 11
  4. 12
  5. 13
  6. Arch

-d since Debian 10 (Buster).

From iptables 1:1.8.13-1 in Arch Linux 2026-11-01. Also shipped by iptables-legacy. Parsed by carta from the page's man source.