Use the TCP timestamp response to approximate the remote host's uptime and aid in further attacks. Additionally, some operating systems can be fingerprinted based on the behavior of their TCP time stamps.
Procedure
- ♦ Deactivate the TCP timestamp response on Linux.
- To set the value of
net.ipv4.tcp_timestampsto0, run thesysctl -w net.ipv4.tcp_timestamps=0command. - Add the
net.ipv4.tcp_timestamps=0value in the defaultsysctl.conffile.
- To set the value of