Probing TCP Implementations


Published: Feb 23, 2000 Updated: Feb 23, 2000 Section: Network Security Library :: Auditing Author: Douglas E. Comer Printable Version Adjust font size: Rating: 3/5 - 1 Votes 1 2 3 4 5

In this paper, we demonstrate a technique called active probing used to study TCP implementations. Active probing treats a TCP implementation as a black box, and uses a set of procedures to probe the black box. By studying the way TCP responds to the probes, one can deduce several characteristics of the implementation. The technique is particularly useful if TCP source code is unavailable.

Click Here to download this article