Re: module question

Andi Kleen (ak@suse.de)
29 May 2002 00:23:33 +0200


"Shipman, Jeffrey E" <jeshipm@sandia.gov> writes:

> I have been assigned to a project where we are trying to fool
> OS footprinters into thinking the machine is running another
> OS. I was thinking I could write a module which registers
> a packet handler to modify the TCP/IP headers as necessary.
> I haven't really looked into this all much.

It's probably impossible to fool advanced tools like http://www.icir.org/tbit/
unless you change some fundamental algorithms in linux TCP (like the
retransmit state machine) or replace it with another TCP.

-Andi
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/