is nmap capable of packet capturing like p0f?

[rotation]

Got it from here:
http://www.insecure.in/hacktools.asp

nmap is the standard tool whilst p0f can identify OS by examining captured packets.
Is nmap also capable of packet capturing?


Btw.: Apparently p0f has been rewritten. Does anybody know if there is an official Repo with the newest version?

[ZEROF]

Hi,

To scan for remote OS version we use option -O. Example:

nmap -sS -O 127.0.0.1

You can add --osscan-guess command if you want nmap to guess remote OS system.

nmap -O --osscan-guess 127.0.0.1

If you want to capture ...use WireShark.

[zerohat]

p0f rewritten, and?
http://lcamtuf.coredump.cx/p0f3/releases/

[Stolas]

It's not made for package capture. You should use Wireshark (it's really cool, esp tshark )
And, if you _must_ use nmap have a look at http://nmap.org/book/nse-api.html I recall you could do it with a nmap script.