# OS fingerprinting - p0f signature update

**URL:** <https://community.zeek.org/t/os-fingerprinting-p0f-signature-update/5731>\
**Category:** Zeek\
**Created:** [June 13, 2019, 11:03pm UTC](https://community.zeek.org/t/os-fingerprinting-p0f-signature-update/5731 "2019-06-13T23:03:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![TQ1](https://avatars.discourse-cdn.com/v4/letter/t/82dd89/32.png) [@TQ1](https://community.zeek.org/u/TQ1)\
**Post date:** [June 13, 2019, 11:03pm UTC](https://community.zeek.org/t/os-fingerprinting-p0f-signature-update/5731/1 "2019-06-13T23:03:01Z")

</div>

Hello All,

I’d like to get the OS fingerprinting working. I see multiple methods to do this, starting with [https://docs.zeek.org/en/stable/scripts/policy/frameworks/software/windows-version-detection.bro.html](https://docs.zeek.org/en/stable/scripts/policy/frameworks/software/windows-version-detection.bro.html), which requires the Microsoft Certificate Revocation List (CRL) event. It was also noticed that there’s p0f integration [https://github.com/bro/bro/blob/master/scripts/base/misc/p0f.fp](https://github.com/bro/bro/blob/master/scripts/base/misc/p0f.fp) which is great, but it looks like it’s using old signature. Is there a way to update this signature to the latest version ([https://github.com/p0f/p0f/blob/master/p0f.fp](https://github.com/p0f/p0f/blob/master/p0f.fp))? Copying the latest file over crashes Zeek.

Thanks,

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/os-fingerprinting-p0f-signature-update/5731/2 "2022-05-06T15:46:34Z")

</div>