/usr/lib64/xtables
NameSizeModeActions
libip6t_ah.so120880755editdlrm
libip6t_DNPT.so120720755editdlrm
libip6t_dst.so121040755editdlrm
libip6t_eui64.so78560755editdlrm
libip6t_frag.so120720755editdlrm
libip6t_hbh.so121120755editdlrm
libip6t_HL.so120800755editdlrm
libip6t_hl.so120720755editdlrm
libip6t_icmp6.so161920755editdlrm
libip6t_ipv6header.so120800755editdlrm
libip6t_LOG.so120960755editdlrm
libip6t_MASQUERADE.so120880755editdlrm
libip6t_mh.so121120755editdlrm
libip6t_NETMAP.so120880755editdlrm
libip6t_REJECT.so120960755editdlrm
libip6t_rt.so121040755editdlrm
libip6t_SNAT.so121120755editdlrm
libip6t_SNPT.so120720755editdlrm
libip6t_srh.so164080755editdlrm
libipt_ah.so120640755editdlrm
libipt_CLUSTERIP.so120880755editdlrm
libipt_ECN.so120800755editdlrm
libipt_icmp.so161840755editdlrm
libipt_LOG.so120960755editdlrm
libipt_MASQUERADE.so120880755editdlrm
libipt_NETMAP.so79840755editdlrm
libipt_realm.so120720755editdlrm
libipt_REJECT.so120960755editdlrm
libipt_SNAT.so121040755editdlrm
libipt_TTL.so120720755editdlrm
libipt_ttl.so120720755editdlrm
libipt_ULOG.so120800755editdlrm
libxt_addrtype.so164560755editdlrm
libxt_AUDIT.so120720755editdlrm
libxt_bpf.so123600755editdlrm
libxt_cgroup.so125200755editdlrm
libxt_CHECKSUM.so79680755editdlrm
libxt_CLASSIFY.so123120755editdlrm
libxt_cluster.so120800755editdlrm
libxt_comment.so120640755editdlrm
libxt_connbytes.so121360755editdlrm
libxt_connlimit.so127120755editdlrm
libxt_CONNMARK.so167200755editdlrm
libxt_connmark.so123200755editdlrm
libxt_CONNSECMARK.so121040755editdlrm
libxt_conntrack.so349040755editdlrm
libxt_cpu.so79520755editdlrm
libxt_CT.so175120755editdlrm
libxt_dccp.so162160755editdlrm
libxt_devgroup.so121200755editdlrm
libxt_DNAT.so215280755editdlrm
libxt_dscp.so122880755editdlrm
libxt_DSCP.so123120755editdlrm
libxt_ecn.so120720755editdlrm
libxt_esp.so120640755editdlrm
libxt_hashlimit.so342480755editdlrm
libxt_helper.so79600755editdlrm
libxt_HMARK.so164640755editdlrm
libxt_IDLETIMER.so122960755editdlrm
libxt_ipcomp.so120720755editdlrm
libxt_iprange.so166960755editdlrm
libxt_ipvs.so123200755editdlrm
libxt_LED.so120720755editdlrm
libxt_length.so120720755editdlrm
libxt_limit.so123280755editdlrm
libxt_mac.so120560755editdlrm
libxt_mark.so122960755editdlrm
libxt_MARK.so170240755editdlrm
libxt_multiport.so169680755editdlrm
libxt_nfacct.so122560755editdlrm
libxt_NFLOG.so121120755editdlrm
libxt_NFQUEUE.so168960755editdlrm
libxt_NOTRACK.so175120755editdlrm
libxt_osf.so120560755editdlrm
libxt_owner.so166960755editdlrm
libxt_physdev.so120720755editdlrm
libxt_pkttype.so120960755editdlrm
libxt_policy.so164400755editdlrm
libxt_quota.so79600755editdlrm
libxt_RATEEST.so121200755editdlrm
libxt_rateest.so162400755editdlrm
libxt_recent.so166320755editdlrm
libxt_REDIRECT.so215280755editdlrm
libxt_rpfilter.so120960755editdlrm
libxt_sctp.so203280755editdlrm
libxt_SECMARK.so123040755editdlrm
libxt_SET.so210960755editdlrm
libxt_set.so253600755editdlrm
libxt_socket.so127040755editdlrm
libxt_standard.so78560755editdlrm
libxt_state.so349040755editdlrm
libxt_statistic.so120960755editdlrm
libxt_string.so164160755editdlrm
libxt_SYNPROXY.so120960755editdlrm
libxt_tcp.so162320755editdlrm
libxt_tcpmss.so120640755editdlrm
libxt_TCPMSS.so123040755editdlrm
libxt_TCPOPTSTRIP.so120960755editdlrm
libxt_TEE.so123040755editdlrm
libxt_time.so203760755editdlrm
libxt_TOS.so123360755editdlrm
libxt_tos.so123200755editdlrm
libxt_TPROXY.so125280755editdlrm
libxt_TRACE.so78560755editdlrm
libxt_u32.so120880755editdlrm
libxt_udp.so120960755editdlrm
Edit: /usr/lib64/xtables/libxt_osf.so (12056B)
ELF>`@'@8 @PP       888$$000 Std000 Ptd DDQtdRtd  XXGNU%26ɲ6cϘ2 @ @ BE|qX qUj v, F"    `__gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTable__cxa_finalizextables_option_parsestrlenputs__printf_chklibxt_osf_initxtables_register_matchlibxtables.so.12libc.so.6_edata__bss_start_endGLIBC_2.3.4GLIBC_2.2.5ti ui          @     8  X  `  x 0                HHi HtH5 % hhhhhh% D% D% D% D%} D%u DH= H=I HB H9tHN Ht H= H5 H)HHH?HHtH HtfD= u+UH= Ht H= Id ]wUSHHHoHC@ tt*uM$H[]f.M$H[]D{$tM$HE H[]@H=PFDHHHDHN 1H5_ff.@SHFDu*HS H51+CDuDu [fDH5w1SHH5u1[fSLH5K1CDHHOS fingerprint match options: [!] --genre string Match a OS genre by passive fingerprinting. --ttl level Use some TTL check extensions to determine OS: 0 true ip and fingerprint TTL comparison. Works for LAN. 1 check if ip TTL is less than fingerprint one. Works for global addresses. 2 do not compare TTL at all. This allows NMAP detection, but can produce false results. --log level Log determined genres into dmesg even if they do not match desired one: 0 log all matched or unknown signatures. 1 log only first one. 2 log all known matched signatures.! OS fingerprint match %s%s ! --genre %s --ttl %u --log %ulibxtables.so.12osfgenrettllog;@\t(DzRx $@pFJ w?:*3$"D`<\lEAG f AAK H AAF YAA1 El G j N DGNU  , ( h |   o`  ( ooooo   00 0  GA$3a1h GA$3p1067`{ GA*GA$annobin gcc 8.5.0 20210514GA$plugin name: gcc-annobinGA$running gcc 8.5.0 20210514GA*GA*GA! GA*FORTIFYGA+GLIBCXX_ASSERTIONS GA*GOW*GA*cf_protectionGA+omit_frame_pointerGA+stack_clashGA!stack_realign GA*FORTIFY0 { GA+GLIBCXX_ASSERTIONSlibxt_osf.so-1.8.8-6.el8.2.imh.x86_64.debugP7zXZִF!t/2]?Eh=ڊ2NV&2]ܹE2B^kS81 ~^幮IjZ+-}wfPVz6d_i0`zbpK`bHХI&wׇ `%W "0zo7ҥ-#m}Ѯ摆jl ү[o?7FhshZr.3״0Ah^S{HJWwc6ˤ4et>@ Fͳ&#>j Z|uoN_UG* ΪdQC6DaX3,fSʮQq~u $~=5O.b-@4 qϝ,b%û܉0g@W>$=q;Js^DDq sP֩jsfq8iMaC8p~?ю`kA4A2P~$ Ra%iS-na]9RSm/TwY O':7l+. Ȭֿ[m.hьc-~m/8w^(~kxf_̉&kܹٝ]n-.Rv:Hag7"bQUHՔ;%HdZߗh>IαgYZ.shstrtab.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.note.gnu.property.init_array.fini_array.data.rel.ro.dynamic.got.data.bss.gnu.build.attributes.gnu_debuglink.gnu_debugdata 88$o``4( P08oEo0T((^Bhhhcpn`w``}| | 2 \ D0000       h   ` H #08#t&(