OK, this is probably nothing, as I'm a linux newbie, but would the OS fingerprinting (active and passive) in ettercap work, or does it also use nmap? FWIW, Good luck! Victor