From owner-freebsd-stable Sat May 5 15:45:56 2001 Delivered-To: freebsd-stable@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-108.dsl.lsan03.pacbell.net [63.207.60.108]) by hub.freebsd.org (Postfix) with ESMTP id 951C737B424 for ; Sat, 5 May 2001 15:45:53 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id B1D5B66C55; Sat, 5 May 2001 15:45:52 -0700 (PDT) Date: Sat, 5 May 2001 15:45:52 -0700 From: Kris Kennaway To: Stephen Montgomery-Smith Cc: Lauri Laupmaa , stable@FreeBSD.ORG Subject: Re: ISN number prediction ? Message-ID: <20010505154552.A60002@xor.obsecurity.org> References: <3AF46C50.640F6C20@inspiral.net> <3AF47E4A.4A54EB0C@math.missouri.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="AhhlLboLdkugWU4S" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3AF47E4A.4A54EB0C@math.missouri.edu>; from stephen@math.missouri.edu on Sat, May 05, 2001 at 05:27:22PM -0500 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --AhhlLboLdkugWU4S Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, May 05, 2001 at 05:27:22PM -0500, Stephen Montgomery-Smith wrote: > Lauri Laupmaa wrote: > >=20 > > Hi > >=20 > > As this analysis http://razor.bindview.com/publish/papers/tcpseq.html p= oints > > out FreeBSD 4 ISN number generation 'is not impressive' It seems to be > > considerably weaker than linux-2.2's... > >=20 >=20 > I remember that if you run the program nmap on your server with the > right flags, that it will give its opinion on how good this is. > But I don't remember the right sequence of flags to do this - anyone > care to help me? Please remember that this is a complicated issue which can't be easily quantified with a single number; nmap can be used as a guide to sequence number predictability, but it's not the whole story. Kris --AhhlLboLdkugWU4S Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.5 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE69IKfWry0BWjoQKURAuLaAKCaS6ORUnb2hZ2wDnKq0aT3q4RWGgCg7r/7 tDnFUisFtXR9lhhVTISMA+8= =pafb -----END PGP SIGNATURE----- --AhhlLboLdkugWU4S-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message