Re: probe for unspecified port

["Gisle Vanem" <giva () bgnett no>]

"CBuH." <479001601 () mail ru> said:

> IMHO nmap has an ability to try 80 port (to find http-server on it) and to 
> find (over last may-be) the uptime of the host.
>
> Smth. like:
> Uptime 0.223 days (since Wed Mar  3 18:40:42 2004)

The uptime is based on the Timestamp in the tcp options. Isn't
it? And I must say that doesn't work for all OS'es either.
How can nmap conclude that the TSval is based on a 1000Hz
counter from the time was started? Does RFC-1323 really say this?

--gv


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org