OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Identifying SUN Solaris Machines using ICMP Address Mask Requests with a little twist
From: Peter J . Holzer (hjpWSR.AC.AT)
Date: Tue Aug 08 2000 - 11:22:28 CDT

On 2000-08-05 20:54:43 +0200, Ofir Arkin wrote:
> It appears that only some of the operating systems would answer an
> ICMP Address Mask Request. Those operating systems include: ULTRIX
> OpenVMS, Windows 95/98/98 SE/ME, NT below SP 4, and SUN Solaris
> machines.

Add HP-UX 11.00 (but not 10.20) to the list.

> [rootaik icmp]# ./sing -mask -c 2 -F 8 IP_Address
> SINGing to IP_Address (IP_Address): 12 data bytes
> 12 bytes from IP_Address: icmp_seq=0 ttl=241 mask=0.0.0.0
> 12 bytes from IP_Address: icmp_seq=1 ttl=241 mask=0.0.0.0
>
> --- IP_Address sing statistics ---
> 2 packets transmitted, 2 packets received, 0% packet loss

HP-UX 11.00 behaves exactly the same.

        hp 

--
   _  | Peter J. Holzer      | 1980: If it's worth implementing once,
|_|_) | Sysadmin WSR / LUGA  |       it's worth implementing twice.
| |   | hjpwsr.ac.at        | 1990: Ship the prototype!
__/   | http://www.hjp.at/   | 2000: Ship the idea!      -- Larry Rosler
  • application/pgp-signature attachment: stored