Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: TCP timestamp & advanced fingerprinting |
|---|---|
| Date: | Fri, 25 Mar 2005 12:34:51 -0800 |
How does this compare with [Prs2002] Clock Deviation/Skew as a Forensics/Tracking Tool research done by Tadayoshi Kohno. http://www.cse.ucsd.edu/users/tkohno/ Bruce Klein iovation, Inc. -----Original Message----- From: Erwan Arzur [mailto:erwan@lse.epita.fr] Sent: Friday, March 25, 2005 6:05 AM To: bugtraq@securityfocus.com Subject: TCP timestamp & advanced fingerprinting -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, attached is a paper from one of our students about using the TCP timestamps in TCP headers as a fingerprinting tip, which can ultimately be used for mapping networks behind firewalls. Erwan Arzur EPITA/EPITECH systems Laboratory http://www.lse.epita.fr/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCRBp5tchshDF9KNYRApEaAJ9Cx+AfvdFyHMll4nBo3ZCrPRzK8ACfasSP Wkx5F+xTG9+BGD/wmWFeOBM= =2T62 -----END PGP SIGNATURE----- The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: smail remote and local root holes (no, not really ;-), Greg A. Woods |
|---|---|
| Next by Date: | Brute-Force scanning the entire 32-bit IP space using Javascript., cyber_flash |
| Previous by Thread: | TCP timestamp & advanced fingerprinting, Erwan Arzur |
| Next by Thread: | Re: TCP timestamp & advanced fingerprinting, Erwan Arzur |
| Indexes: | [Date] [Thread] [Top] [All Lists] |