Nmap Development mailing list archives

Re: Uptime estimates and TCP timestamp offsets


From: Brandon Enright <bmenrigh () ucsd edu>
Date: Tue, 19 Aug 2008 02:47:50 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 18 Aug 2008 21:36:25 -0400
"Michael Pattrick" <snownet () gmail com> wrote:

With the Debian Lenny kernel, I get:
Uptime: 198.840 days (since Sat Feb 02 00:01:06 2008)
Uptime: 199.637 days (since Fri Feb 01 04:55:34 2008)
Uptime: 199.637 days (since Fri Feb 01 04:57:27 2008)
Uptime: 198.838 days (since Sat Feb 02 00:10:15 2008)

Interesting numbers.  The max difference in these numbers is very nearly
2^16 seconds.  199 days is very nearly 2^24 seconds.

Perhaps there is an endianness problem in the timestamps some kernels
use?

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkiqNF0ACgkQqaGPzAsl94KpHwCgkGTJupEp/b/P+BqYNVP4pk0j
53kAoJZU7AvXBnYpT17FOj5CmEgvob6y
=EEnW
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: