/usr/lib64/xtables/
/usr/lib64/xtables
NameSizeModeActions
libarpt_mangle.so121200755editdlrm
libebt_802_3.so120640755editdlrm
libebt_among.so120800755editdlrm
libebt_arp.so161600755editdlrm
libebt_arpreply.so120640755editdlrm
libebt_dnat.so120880755editdlrm
libebt_ip.so204240755editdlrm
libebt_ip6.so203920755editdlrm
libebt_log.so121040755editdlrm
libebt_mark.so120960755editdlrm
libebt_mark_m.so120800755editdlrm
libebt_nflog.so120720755editdlrm
libebt_pkttype.so120720755editdlrm
libebt_redirect.so120640755editdlrm
libebt_snat.so120880755editdlrm
libebt_stp.so162080755editdlrm
libebt_vlan.so120640755editdlrm
libip6t_ah.so120720755editdlrm
libip6t_DNAT.so164960755editdlrm
libip6t_DNPT.so120640755editdlrm
libip6t_dst.so120880755editdlrm
libip6t_eui64.so78560755editdlrm
libip6t_frag.so120640755editdlrm
libip6t_hbh.so120960755editdlrm
libip6t_HL.so120720755editdlrm
libip6t_hl.so120640755editdlrm
libip6t_icmp6.so161840755editdlrm
libip6t_ipv6header.so120640755editdlrm
libip6t_LOG.so120880755editdlrm
libip6t_MASQUERADE.so120800755editdlrm
libip6t_mh.so120960755editdlrm
libip6t_NETMAP.so120880755editdlrm
libip6t_REDIRECT.so120720755editdlrm
libip6t_REJECT.so120880755editdlrm
libip6t_rt.so121040755editdlrm
libip6t_SNAT.so121040755editdlrm
libip6t_SNPT.so120640755editdlrm
libip6t_srh.so164000755editdlrm
libipt_ah.so120640755editdlrm
libipt_CLUSTERIP.so120800755editdlrm
libipt_DNAT.so164880755editdlrm
libipt_ECN.so120720755editdlrm
libipt_icmp.so161840755editdlrm
libipt_LOG.so120960755editdlrm
libipt_MASQUERADE.so120800755editdlrm
libipt_NETMAP.so79760755editdlrm
libipt_realm.so120560755editdlrm
libipt_REDIRECT.so120720755editdlrm
libipt_REJECT.so120880755editdlrm
libipt_SNAT.so121200755editdlrm
libipt_TTL.so120640755editdlrm
libipt_ttl.so120720755editdlrm
libipt_ULOG.so120720755editdlrm
libxt_addrtype.so164480755editdlrm
libxt_AUDIT.so120640755editdlrm
libxt_bpf.so123520755editdlrm
libxt_cgroup.so125120755editdlrm
libxt_CHECKSUM.so79600755editdlrm
libxt_CLASSIFY.so123040755editdlrm
libxt_cluster.so120800755editdlrm
libxt_comment.so120560755editdlrm
libxt_connbytes.so121280755editdlrm
libxt_connlabel.so120880755editdlrm
libxt_connlimit.so126960755editdlrm
libxt_CONNMARK.so167120755editdlrm
libxt_connmark.so123120755editdlrm
libxt_CONNSECMARK.so121040755editdlrm
libxt_conntrack.so348960755editdlrm
libxt_cpu.so79440755editdlrm
libxt_CT.so175040755editdlrm
libxt_dccp.so162000755editdlrm
libxt_devgroup.so121120755editdlrm
libxt_DSCP.so123040755editdlrm
libxt_dscp.so122800755editdlrm
libxt_ecn.so120640755editdlrm
libxt_esp.so120560755editdlrm
libxt_hashlimit.so342400755editdlrm
libxt_helper.so79520755editdlrm
libxt_HMARK.so164560755editdlrm
libxt_IDLETIMER.so122880755editdlrm
libxt_ipcomp.so120640755editdlrm
libxt_iprange.so166960755editdlrm
libxt_ipvs.so123120755editdlrm
libxt_LED.so120640755editdlrm
libxt_length.so120640755editdlrm
libxt_limit.so123200755editdlrm
libxt_mac.so120560755editdlrm
libxt_MARK.so170240755editdlrm
libxt_mark.so122880755editdlrm
libxt_multiport.so169680755editdlrm
libxt_nfacct.so122400755editdlrm
libxt_NFLOG.so121120755editdlrm
libxt_NFQUEUE.so168880755editdlrm
libxt_NOTRACK.so175040755editdlrm
libxt_osf.so120480755editdlrm
libxt_owner.so166880755editdlrm
libxt_physdev.so120640755editdlrm
libxt_pkttype.so120960755editdlrm
libxt_policy.so164320755editdlrm
libxt_quota.so79520755editdlrm
libxt_RATEEST.so121120755editdlrm
libxt_rateest.so162320755editdlrm
libxt_recent.so166240755editdlrm
libxt_rpfilter.so120880755editdlrm
libxt_sctp.so203200755editdlrm
libxt_SECMARK.so122960755editdlrm
libxt_SET.so210880755editdlrm
libxt_set.so253520755editdlrm
libxt_socket.so126960755editdlrm
libxt_standard.so78480755editdlrm
libxt_state.so348960755editdlrm
libxt_statistic.so120880755editdlrm
libxt_string.so164000755editdlrm
libxt_SYNPROXY.so120880755editdlrm
libxt_tcp.so162240755editdlrm
libxt_TCPMSS.so122960755editdlrm
libxt_tcpmss.so79440755editdlrm
libxt_TCPOPTSTRIP.so120880755editdlrm
libxt_TEE.so122960755editdlrm
libxt_time.so203680755editdlrm
libxt_TOS.so123440755editdlrm
libxt_tos.so123120755editdlrm
libxt_TPROXY.so125200755editdlrm
libxt_TRACE.so78400755editdlrm
libxt_u32.so120880755editdlrm
libxt_udp.so120880755editdlrm
Edit: /usr/lib64/xtables/libxt_osf.so (12048B)
ELF>`@'@8 @PP       888$$000 Std000 Ptd DDQtdRtd  XXGNU+Zmr pk @ @ BE|qX qUj v, F"    `__gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTable__cxa_finalizextables_option_parsestrlenputs__printf_chklibxt_osf_initxtables_register_matchlibxtables.so.12libc.so.6_edata__bss_start_endGLIBC_2.3.4GLIBC_2.2.5ti ui          @     8  X  `  x 0                HHi HtH5 % hhhhhh% D% D% D% D%} D%u DH= H=I HB H9tHN Ht H= H5 H)HHH?HHtH HtfD= u+UH= Ht H= Id ]wUSHHHoHC@ tt*uM$H[]f.M$H[]D{$tM$HE H[]@H=PFDHHHDHN 1H5_ff.@SHFDu*HS H51+CDuDu [fDH5w1SHH5u1[fSLH5K1CDHHOS fingerprint match options: [!] --genre string Match a OS genre by passive fingerprinting. --ttl level Use some TTL check extensions to determine OS: 0 true ip and fingerprint TTL comparison. Works for LAN. 1 check if ip TTL is less than fingerprint one. Works for global addresses. 2 do not compare TTL at all. This allows NMAP detection, but can produce false results. --log level Log determined genres into dmesg even if they do not match desired one: 0 log all matched or unknown signatures. 1 log only first one. 2 log all known matched signatures.! OS fingerprint match %s%s ! --genre %s --ttl %u --log %ulibxtables.so.12osfgenrettllog;@\t(DzRx $@pFJ w?:*3$"D`<\lEAG f AAK H AAF YAA1 El G j N DGNU  , ( h |   o`  ( ooooo   00 0  GA$3a1h GA$3p1113`{ GA*GA$annobin gcc 8.5.0 20210514GA$plugin name: annobinGA$running gcc 8.5.0 20210514GA*GA*GA! GA*FORTIFYGA+GLIBCXX_ASSERTIONS GA*GOW*GA*cf_protectionGA+omit_frame_pointerGA+stack_clashGA!stack_realign GA*FORTIFY0 { GA+GLIBCXX_ASSERTIONSlibxt_osf.so-1.8.5-11.el8_9.x86_64.debug0~7zXZִF!t/2]?Eh=ڊ2NV&2]ܹE2B^kS81 ~^幮IjZ+-}wfPVz6d_i0`zbpK`bHХI&wׇ `%W "0zo7‚yC$% rvГ$&9E7Y)g\ ]TR̦pa)g-6P,G:= ._h9G`)`0C+"̀F{')bg4]3jAVq`IRZIαgYZ.shstrtab.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.note.gnu.property.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu.build.attributes.gnu_debuglink.gnu_debugdata 88$o``4( P08oEo0T((^Bhhhcpn`w``}| | 2 \ D0000       h   ` D #04#t&(