3 ms·
I assume p0f doesn't do TCP timestamp clock skew fingerprinting out of curiosity too? Curious if there are any OSS tools for that.
by anfractuosity 4y ago
I assume p0f doesn't do TCP timestamp clock skew fingerprinting out of curiosity too? Curious if there are any OSS tools for that.
- nibbleshifter 4y agonmap reports clock skew.
- anfractuosity 4y agoDo you mean via this script - https://svn.nmap.org/nmap/scripts/clock-skew.nse https://svn.nmap.org/nmap/scripts/clock-skew.nse , if so it looks like that's extracting time values from protocols above TCP such as HTTP etc? Please correct me, if I misunderstood what you meant. This was the type of technique I was thinking of - https://murdoch.is/talks/eurobsdcon07hotornot.pdf https://murdoch.is/talks/eurobsdcon07hotornot.pdf
- gsich 4y agoOn Linux TCP timestamps are random.