I think nmap uses the tcp packet sequence number to determine the uptime of the remote machine... why don't you want people to get your uptime?
Stou
----- Original Message -----
From: Florian Effenberger
Sent: 12/25/2002 11:20:05 AM
To: nmap-dev_at_insecure.org
Subject: querying uptime
> Hi everyone,
>
> I have a question which I hope you can help me to answer. ;-)
>
> nmap can query the uptime of a host, even if all time services are disabled.
> I have been googling around a bit, but didn't find anything on that topic,
> so maybe you can help me.
>
> Is there any possibility of disabling the uptime query on Linux and *BSD
> boxes? I don't want anyone to get my uptime...
>
> Thanks,
> Florian
>
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to
> nmap-dev-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
>
>
---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to
nmap-dev-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
Received on Dec 27 2002