Scroll down for answer
The following books are highly recommended to progress your CEH v10 studies.
The passive operating system fingerprinting is a feature built into both the pf and tcpdump tools.
CEH v10 EC Council questions and answers.
FREE PDF Download of all CEH v10 exam questions and answers.