Subject: Re: random ip_id must be configurable To: None <david@l8s.co.uk> From: Jun-ichiro itojun Hagino <itojun@itojun.org> List: tech-net Date: 09/13/2003 14:53:00
> Do they randomize them? or just count in odd fashion?
> I don't actually know the tests that nmap is doing, but 'count XOR 0xaaaa'
> would (probably) show up as random.
see nmap osscan.cc:ipid_sequence.
itojun