CAPEC-327 TCP Options Probe

This OS fingerprinting probe analyzes the type and order of any TCP header options present within a response segment. Most operating systems use unique ordering and different option sets when options are present. RFC 793 does not specify a required order when options are present, so different implementations use unique ways of ordering or structuring TCP options. TCP options can be generated by ordinary TCP traffic.

• The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

• Confidentiality: Read Data • Confidentiality, Access Control, Authorization: Bypass Protection Mechanism, Hide Activities