TCP: How are the seq / ack numbers generated?

前端 未结 8 1972
刺人心
刺人心 2021-02-01 20:50

I am currently working on a program which sniffs TCP packets being sent and received to and from a particular address. What I am trying to accomplish is replying with custom tai

相关标签:
8条回答
  • 2021-02-01 21:27

    If I understand you correctly - you're trying to mount a TCP SEQ prediction attack. If that's the case, you'll want to study the specifics of your target OS's Initial Sequence Number generator.

    There were widely publicized vulnerabilties in pretty much all the major OS's wrt their ISN generators being predictable. I haven't followed the fallout closely, but my understanding is that most vendors released patches to randomize their ISN increments.

    0 讨论(0)
  • 2021-02-01 21:27

    Seems that the rest of the answers explained pretty much all about where to find detailed and official information about ACK's, namely TCP RFC

    Here's a more practical and "easy understood" page that I found when I was doing similar implementations that may also help TCP Analysis - Section 2: Sequence & Acknowledgement Numbers

    0 讨论(0)
提交回复
热议问题