[Plugins-writers] icmp_timestamp.nasl (10114)

From: Dennis Jackson (DennisJ@private)
Date: Fri Feb 06 2004 - 06:38:14 PST

  • Next message: Stuart Powell: "Re: [Plugins-writers] Re: Nessus not scanning"

    Attached is an update to icmp_timestamp.nasl.
    This to includes details of the time on the remote system, and a guess of
    the system type.
    
    Unix systems send the most significant byte of the time first.
    Windows systems send the most significant byte of the time last.
    Cisco systems send the most significant byte first, but set the first bit.
    The most significant byte cannot exceed 0x05.
    The script could get the format wrong if the remote systems is Windows and
    the first (least significant byte) happens to be 0x05 or lower or if it has 
    just the top bit set. The solution would be to query the system twice and 
    look for the difference.
    
    --
    Dennis Jackson 
    Senior Security Consultant 
    Peapod Consulting 
    Telephone: +44 (0)20 8606 9990 
    Email: Dennis.Jackson@private 
    Web: www.peapod.co.uk/consulting  
    Peapod Consulting is a unit of Peapod (UK) Limited at Lindbergh House,
    Navigator Park, Southall Lane, Southall, Middlesex, UB2 5NH 
    
    
    
    
    This email and any attachments are intended solely for the recipient or entity to which
    they are addressed and may be of a confidential nature. If you have received this in error,
    delete the original message and any other copies you may have.
    The company reserves the right to monitor, content scan and archive all traffic,
    including emails, transmitted on their networks. Whilst this email has been scanned and
    is believed to be virus free when it was sent, it is your responsibility to ensure that this is
    the case.
    
    
    
    
    
    
    
    

    _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers



    This archive was generated by hypermail 2b30 : Sat Feb 07 2004 - 05:10:55 PST