Bonjour,

On Mon, 6 Jan 2020 12:19:28 +0100
"Paul Rolland (ポール・ロラン)" <rol+fr...@witbe.net> wrote:

> On Sun, 5 Jan 2020 02:40:34 +0100
> Baptiste Jonglez <bapti...@bitsofnetworks.org> wrote:
> 
> >     for ttl in {0..31}
> >     do
> >       iptables -t mangle -A OUTPUT -p icmp --icmp-type echo-reply -m
> > statistic --mode nth --every 32 --packet $ttl -j TTL --ttl-set
> > $((ttl+72)) done  
> 
> --mode random --probability 0.03125 
> a la place de
> --mode nth --every 32 --packet $ttl
> devrait apporter un certain cote random...

Je viens de faire le test, c'est tres amusant :

267 [14:24] rol@riri:~> ping -c 10 192.168.1.150
PING 192.168.1.150 (192.168.1.150) 56(84) bytes of data.
64 bytes from 192.168.1.150: icmp_seq=1 ttl=64 time=0.555 ms
64 bytes from 192.168.1.150: icmp_seq=2 ttl=79 time=0.450 ms
64 bytes from 192.168.1.150: icmp_seq=3 ttl=96 time=0.373 ms
64 bytes from 192.168.1.150: icmp_seq=4 ttl=64 time=0.435 ms
64 bytes from 192.168.1.150: icmp_seq=5 ttl=85 time=0.363 ms
64 bytes from 192.168.1.150: icmp_seq=6 ttl=102 time=0.364 ms
64 bytes from 192.168.1.150: icmp_seq=7 ttl=74 time=0.486 ms
64 bytes from 192.168.1.150: icmp_seq=8 ttl=102 time=0.492 ms
64 bytes from 192.168.1.150: icmp_seq=9 ttl=87 time=0.406 ms
64 bytes from 192.168.1.150: icmp_seq=10 ttl=83 time=0.339 ms

--- 192.168.1.150 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 204ms
rtt min/avg/max/mdev = 0.339/0.426/0.555/0.068 ms

avec :
for ttl in {0..31}
do
  iptables -t mangle -A OUTPUT -p icmp --icmp-type echo-reply -m statistic  
--mode random --probability 0.03125 -j TTL --ttl-set $((ttl+72))
done

A vous de jouer maintenant !

Paul


---------------------------
Liste de diffusion du FRnOG
http://www.frnog.org/

Répondre à