[prev in list] [next in list] [prev in thread] [next in thread]
List: nessus-plugins-writers
Subject: [Plugins-writers] icmp_timestamp.nasl (10114)
From: Dennis Jackson <DennisJ () peapod ! co ! uk>
Date: 2004-02-06 14:38:14
Message-ID: 8CD0912802012F459356FC395733FBF93119F3 () webmail ! peapod ! co ! uk
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Attached is an update to icmp_timestamp.nasl.
This to includes details of the time on the remote system, and a guess of
the system type.
Unix systems send the most significant byte of the time first.
Windows systems send the most significant byte of the time last.
Cisco systems send the most significant byte first, but set the first bit.
The most significant byte cannot exceed 0x05.
The script could get the format wrong if the remote systems is Windows and
the first (least significant byte) happens to be 0x05 or lower or if it has
just the top bit set. The solution would be to query the system twice and
look for the difference.
--
Dennis Jackson
Senior Security Consultant
Peapod Consulting
Telephone: +44 (0)20 8606 9990
Email: Dennis.Jackson@peapod.co.uk
Web: www.peapod.co.uk/consulting
Peapod Consulting is a unit of Peapod (UK) Limited at Lindbergh House,
Navigator Park, Southall Lane, Southall, Middlesex, UB2 5NH
This email and any attachments are intended solely for the recipient or entity to which
they are addressed and may be of a confidential nature. If you have received this in error,
delete the original message and any other copies you may have.
The company reserves the right to monitor, content scan and archive all traffic,
including emails, transmitted on their networks. Whilst this email has been scanned and
is believed to be virus free when it was sent, it is your responsibility to ensure that this is
the case.
[Attachment #5 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD><META http-equiv=Content-Type content="text/html; \
charset=iso-8859-1"><TITLE></TITLE></HEAD> <BODY>
<!-- MAILMAN BRAND MARKER -->
<TABLE width="100%" border="0" cellspacing="0" cellpadding="0">
<TBODY>
<TR>
<TD vAlign="top">
<DIV align="left">
<div><font face="Arial" size="2">Attached is an update to \
icmp_timestamp.nasl.</font></div> <div><font face="Arial" size="2">This to includes \
details of the time on the remote system, and a guess of</font></div> <div><font \
face="Arial" size="2">the system type.</font></div> <div> </div>
<div><font face="Arial" size="2">Unix systems send the most significant byte of the \
time first.</font></div> <div><font face="Arial" size="2">Windows systems send the \
most significant byte of the time last.</font></div> <div><font face="Arial" \
size="2">Cisco systems send the most significant byte first, but set the first \
bit.</font></div> <div><font face="Arial" size="2">The most significant byte cannot \
exceed 0x05.</font></div> <div><font face="Arial" size="2">The script could get the \
format wrong if the remote systems is Windows and</font></div> <div><font \
face="Arial" size="2">the first (least significant byte) happens to be 0x05 or lower \
or if it has </font></div> <div><font face="Arial" size="2">just the top bit set. The \
solution would be to query the system twice and </font></div> <div><font face="Arial" \
size="2">look for the difference.</font></div> <div> </div>
<div><font face="Arial" size="2">--</font></div>
<div><font face="Arial" size="2">Dennis Jackson </font></div>
<div><font face="Arial" size="2">Senior Security Consultant </font></div>
<div><font face="Arial" size="2">Peapod Consulting </font></div>
<div><font face="Arial" size="2">Telephone: +44 (0)20 8606 9990 </font></div>
<div><font face="Arial" size="2">Email: <a \
href="mailto:Dennis.Jackson@peapod.co.uk">Dennis.Jackson@peapod.co.uk</a> \
</font></div> <div><font face="Arial" size="2">Web: <a \
href="http://www.peapod.co.uk/consulting">www.peapod.co.uk/consulting</a> \
</font></div> <div><font face="Arial" size="2">Peapod Consulting is a unit of Peapod \
(UK) Limited at Lindbergh House,</font></div> <div><font face="Arial" \
size="2">Navigator Park, Southall Lane, Southall, Middlesex, UB2 5NH </font></div> \
<div> </div> <div> </div>
<div> </div>
<div> </div>
<div><font face="Arial" size="2">This email and any attachments are intended solely \
for the recipient or entity to which</font></div> <div><font face="Arial" \
size="2">they are addressed and may be of a confidential nature. If you have received \
this in error,</font></div> <div><font face="Arial" size="2">delete the original \
message and any other copies you may have.</font></div> <div><font face="Arial" \
size="2">The company reserves the right to monitor, content scan and archive all \
traffic,</font></div> <div><font face="Arial" size="2">including emails, transmitted \
on their networks. Whilst this email has been scanned and</font></div> <div><font \
face="Arial" size="2">is believed to be virus free when it was sent, it is your \
responsibility to ensure that this is</font></div> <div><font face="Arial" \
size="2">the case.</font></div> <div> </div>
<BR>
________________________________________________________________________<BR>
This e-mail has been scanned for all viruses by Peapod. The<BR>
service is powered by Star Internet. For more information on a proactive<BR>
anti-virus service working around the clock, around the globe, visit:<BR>
<A
href=http://www.peapod.co.uk/cleanmail>
http://www.peapod.co.uk/cleanmail</A><BR>
<BR>
________________________________________________________________________<BR>
</DIV>
</TD>
<TD vAlign="top" align="right" width="160">
<DIV align="right">
<IMG src="http://ce.insight.messagelabs.com/ce10/content/viewer/111476158/128446266/128446267/128446268.gif" \
alt="Peapod Uk Ltd corporate logo" border="0" useMap="#starbrand2004">
<map name="starbrand2004">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/starbrand/" COORDS="0,489, \
160,507">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/" COORDS="0,411, 160,486">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/mxtreme/" COORDS="0,337, \
159,401">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/netscreen/" COORDS="0,287, \
159,335">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/finjan/" COORDS="0,230, \
159,284">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk/cleanmail/" COORDS="0,155, \
159,228">
<AREA SHAPE="RECT" HREF="http://www.peapod.co.uk" COORDS="1,0, 159,150">
</MAP>
</DIV>
</TD>
</TR>
</TBODY>
</TABLE>
<BR>
<img src=http://at.insight.messagelabs.com/at10/file/131881586:52c62a1b1219438d11437b4dec56bef/?131881586:52c62a1b1219438d11437b4dec56bef \
width=1 height=1>
</BODY></HTML>
["icmp_timestamp.nasl" (application/octet-stream)]
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic