Which of the following applications is NOT used for passive OS fingerprinting?

Networkminer is a passive network forensic analyzer that reconstructs OS information from captured packets without sending any probe traffic.

Satori is a passive fingerprinting tool that identifies devices and operating systems by observing DHCP, mDNS, and other broadcast traffic on the network.

p0f is a well-known purely passive OS fingerprinting tool that identifies operating systems solely by analyzing the characteristics of incoming TCP/IP packets.

Nmap's OS detection engine (-O flag) actively transmits a series of specially crafted TCP, UDP, and ICMP packets to the target host and analyzes the responses to determine the operating system. This active probing generates traffic visible on the network and on the target, which is the defining characteristic of active - not passive - fingerprinting.