geedge.lantern.io
detection confidence: medium public

Geedge Networks maintains 'libosfp' (formerly MESA_osfp), a p0f-style passive OS/device fingerprinting library that classifies hosts from TCP SYN/SYN-ACK characteristics (ordered TCP options, a scoring database, per-OS pcap fixtures for Linux/Windows/unknown IPv4/IPv6), packaged as a shared component in the MESA/TSG framework RPM family.

src/osfp_fingerprint.c, src/osfp_score_db.c, fp.json, data.json, pcap/linux_ipv4_syn.pcap, pcap/windows_ipv4_syn.pcap, pcap/unknown_ipv6_syn.pcap -- commit: "package: rpm name MESA_osfp -> libosfp library: libMESA_osfp -> libosfp"
capabilitydpi-signature

extracted_by: claude-sonnet-5 · added 2026-08-26 · id: 2026-libosfp-passive-fingerprint