Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: probe for unspecified port
From: "Gisle Vanem" <giva () bgnett no>
Date: Mon, 8 Mar 2004 01:40:35 +0100

"CBuH." <479001601 () mail ru> said:

IMHO nmap has an ability to try 80 port (to find http-server on it) and to 
find (over last may-be) the uptime of the host.

Smth. like:
Uptime 0.223 days (since Wed Mar  3 18:40:42 2004)

The uptime is based on the Timestamp in the tcp options. Isn't
it? And I must say that doesn't work for all OS'es either.
How can nmap conclude that the TSval is based on a 1000Hz
counter from the time was started? Does RFC-1323 really say this?

--gv


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]