OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1995: Re: Chances of guessing?

Re: Chances of guessing?

Timothy Newsham (newshamaloha.net)
Fri, 27 Jan 1995 21:15:57 -1000 (HST)

> to get in.  I'd like to avoid writing a program to exploit this
> and testing it several hundred times here to get a figure.

write a program to send out SYN's and get back SYN+ACK's and
record them,  or just record a bunch of SYN+ACK responses from
your host to other hosts along with a timestamp.  Now take
those recorded numbers and see if you can predict the
next value given the previous N values and timestamps and
the next timestamp.

tcpdump can get you sequence numbers and timestamps.

> Leo Bicknell - bicknellvt.edu                     | Make a little birdhouse
>                bicknellcsugrad.cs.vt.edu          | in your soul......
>                bicknellussenterprise.async.vt.edu | They Might