From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Tue, 28 May 2002 18:23:35 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Tue, 28 May 2002 18:23:34 -0400 Received: from ns.suse.de ([213.95.15.193]:1289 "EHLO Cantor.suse.de") by vger.kernel.org with ESMTP id ; Tue, 28 May 2002 18:23:33 -0400 To: "Shipman, Jeffrey E" Cc: linux-kernel@vger.kernel.org Subject: Re: module question In-Reply-To: <03781128C7B74B4DBC27C55859C9D7380984062E@es06snlnt.suse.lists.linux.kernel> From: Andi Kleen Date: 29 May 2002 00:23:33 +0200 Message-ID: X-Mailer: Gnus v5.7/Emacs 20.6 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org "Shipman, Jeffrey E" writes: > I have been assigned to a project where we are trying to fool > OS footprinters into thinking the machine is running another > OS. I was thinking I could write a module which registers > a packet handler to modify the TCP/IP headers as necessary. > I haven't really looked into this all much. It's probably impossible to fool advanced tools like http://www.icir.org/tbit/ unless you change some fundamental algorithms in linux TCP (like the retransmit state machine) or replace it with another TCP. -Andi