> The current code actually checks for 3 drifts : one in ICMP, one in > NTP and one in HTTP. It's a safe bet to assume that the remote host is > constistent with itself, and exit after the first answer we get > (ie: if the ICMP timestamp is correct, exit right away instead of > trying NTP and HTTP). The first incarnation was like this, but got rewritten because it is not that unusual to have a single IP address which is assigned to a firewall/NAT host protecting multiple web servers on different ports. This would mean that there might be multiple real hosts (and stray clocks) behind a single address; the test results then have interesting implications... Martin... _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2.1.3 : Fri Sep 24 2004 - 07:00:43 PDT