Berkeley CSUA MOTD:Entry 15259
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2024/11/23 [General] UID:1000 Activity:popular
11/23   

1999/1/20-23 [Computer/Networking] UID:15259 Activity:high
1/20    If you know a person's IP address at which they're connected to
        the Internet, is there some sort of way to find out what kind of
        computer system they're using?
        \_ newest release of nmap will do this reasonably well by
           examing differences in tcp/ip stack.  There is another
           prog called queso that does this as well.  See also
           latest issue of phrack if you care about implementation
           details.  --sky
           \_ of course there's like a 90% chance they're running some wintel
              machine, so you could skip all that and try the wintel hacks
              to see what works.
              \_ esp. since nmap/queso can't distinguish btwn 95/98/NT...
                 \_ actually, 95 has fucked up timestamps.  Its about
                    the only way to distinguish btwn 95/NT -sky
           \_ Are nmap or queso installed on soda anywhere?
              \_ I doubt it...and even if it was, it uses raw ip
                 so you are not 31337 enough to run it. -sky
                 \_ ~sky/bin, but you can't execute them
        \_ BTW, how come "nslookup -q=hinfo <ip addr>" doesn't work?
                \_ maybe the dns admin didn't bother putting in the information
                   there?  I dont know of many how do that any more. Its a
                   minor security risk.
                \_ Lotsa dns admins don't even know about it.
                   \_ Some even fake the data there.
                        \_ GASP!  Fake data on the net?!  Heavens, no!
                           \_ the net is always right. Your perception of
                              reality is wrong
                                \_ Adam?  I thought you went to M$ and became
                                   a borg.
                                   \_ once again, your perception of reality
                                     is wrong. -- notAdam
2024/11/23 [General] UID:1000 Activity:popular
11/23   

You may also be interested in these entries...
2008/8/5-10 [Computer/Networking] UID:50788 Activity:nil
8/5     It looks like my company has started blocking HTTPS tunneling.
        I used to do this by tunneling SSH through the HTTP/HTTPS proxy
        server, but this seems to have stopped working. Does anyone know
        how the implementation of tunneling detection works, and whether
        there are widely available implementations? We run a bunch of MS
        stuff, so I imagine we're running an MS proxy server or something.
	...
2001/8/5-6 [Computer/Networking] UID:22011 Activity:very high
8/5     I've just setup a new firewall at home and I'm looking for a
        tool to test it out. Any recommendations?
        I'm also running a caching DNS server on the firewall and I'd
        like to setup a rule that allows the server to make queries
        and recieve responses but that blocks inbound queries. I can't
        seem to figure out how to do this though as my ipf fu is weak.
	...