Probe Uptime by Tcp TimeStamps
Posted on 2011-10-26 in Projects • 1 min read
putts sniffs for Tcp traffic of a remote host. If those Tcp packets contains timestamps (RFC 1323) this tool might be used to get the systems uptime.
This script calls tcpdump(8) to get the Tcp timestamps of the target host. You have to make Tcp traffic to the remote host after starting putts. Terminate putts by pressing C-C after a while. Putts will print the assumed uptime if enough data has been collected.
The determined tick value of the target host gives hints on the targets operating system. The TICKS file shows known values of some operating systems.