diff options
author | David E. O'Brien <obrien@FreeBSD.org> | 1998-10-24 23:31:27 +0000 |
---|---|---|
committer | David E. O'Brien <obrien@FreeBSD.org> | 1998-10-24 23:31:27 +0000 |
commit | 0d9972514bca048aeb0c88a899d352ca50351f53 (patch) | |
tree | ad0c632ae508e45b880e3fb56e652d219c585885 /net/queso/pkg-descr | |
parent | 70364f181ba7c815fa84405998b754f2dc29e0e2 (diff) |
Notes
Diffstat (limited to 'net/queso/pkg-descr')
-rw-r--r-- | net/queso/pkg-descr | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/net/queso/pkg-descr b/net/queso/pkg-descr new file mode 100644 index 000000000000..940786bb46c9 --- /dev/null +++ b/net/queso/pkg-descr @@ -0,0 +1,21 @@ +QueSO homepage -- http://www.apostols.org/projectz/queso/ + +How we can determine the remote OS using simple tcp packets? Well, +it's easy, they're packets that don't make any sense, so the RFCs +don't clearly state what to answer in these kind of situations. +Facing this ambiguous, each TCP/IP stack takes a different approach +to the problem, and this way, we get a different response. In some +cases (like Linux, to name one) some programming mistakes make the OS +detectable. + +QueSO sends: + + 0 SYN * THIS IS VALID, used to verify LISTEN + 1 SYN+ACK + 2 FIN + 3 FIN+ACK + 4 SYN+FIN + 5 PSH + 6 SYN+XXX+YYY * XXX & YYY are unused TCP flags + +All packets have a random seq_num and a 0x0 ack_num. |