RE: [Plugins-writers] Unsynchronised clock detection

From: Martin O'Neal (martin.oneal@private)
Date: Fri Sep 24 2004 - 06:59:50 PDT


>  The current code actually checks for 3 drifts : one in ICMP, one in
>  NTP and one in HTTP. It's a safe bet to assume that the remote host
is
>  constistent with itself, and exit after the first answer we get
>  (ie: if the ICMP timestamp is correct, exit right away instead of
>  trying NTP and HTTP).

The first incarnation was like this, but got rewritten because it is not
that unusual to have a single IP address which is assigned to a
firewall/NAT host protecting multiple web servers on different ports.
This would mean that there might be multiple real hosts (and stray
clocks) behind a single address; the test results then have interesting
implications...

Martin...
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Fri Sep 24 2004 - 07:00:43 PDT