> ...has a scan on a Linux kernel reported the uptime? From
http://www.insecure.org/nmap/nmap-fingerprinting-article.html TCP Timestamp -- Another number that can be sequenced for OS detection purposes is the TCP timestamp option values. Some systems do not support the feature, others increment the value at frequencies of 2HZ, 100HZ, or 1000HZ, and still others return 0. Nmap also uses this information to determine uptime values for the remote host. so perhaps it has figured it out.... dave -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
