Use the TCP timestamp response to approximate the remote host's uptime and aid in further attacks. Additionally, some operating systems can be fingerprinted based on the behavior of their TCP time stamps.

Procedure

  • Disable the TCP timestamp response on Linux.
    1. To set the value of net.ipv4.tcp_timestamps to 0, run the sysctl -w net.ipv4.tcp_timestamps=0 command.
    2. Add the net.ipv4.tcp_timestamps=0 value in the default sysctl.conf file.