Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I assume p0f doesn't do TCP timestamp clock skew fingerprinting out of curiosity too? Curious if there are any OSS tools for that.


On Linux TCP timestamps are random.


nmap reports clock skew.


Do you mean via this script - https://svn.nmap.org/nmap/scripts/clock-skew.nse , if so it looks like that's extracting time values from protocols above TCP such as HTTP etc? Please correct me, if I misunderstood what you meant.

This was the type of technique I was thinking of - https://murdoch.is/talks/eurobsdcon07hotornot.pdf




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: