IP ID: Detectando sistemas detrás de un middle-box (II) Utilizando herramientas tales como hping: # hping2 -c 10 -i 1 -p 80 -S 128.0.0.1 HPING 128.0.0.1 (eth0 128.0.0.1): S set, 40 headers + 0 data bytes 46 bytes from 128.0.0.1: flags=SA seq=0 ttl=56 id=57645 win=16616 rtt=21.2 ms 46 bytes from 128.0.0.1: flags=SA seq=1 ttl=56 id=57650 win=16616 rtt=21.4 ms 46 bytes from 128.0.0.1: flags=RA seq=2 ttl=56 id=18574 win=0 rtt=21.3 ms 46 bytes from 128.0.0.1: flags=RA seq=3 ttl=56 id=18587 win=0 rtt=21.1 ms 46 bytes from 128.0.0.1: flags=RA seq=4 ttl=56 id=18588 win=0 rtt=21.2 ms 46 bytes from 128.0.0.1: flags=SA seq=5 ttl=56 id=57741 win=16616 rtt=21.2 ms 46 bytes from 128.0.0.1: flags=RA seq=6 ttl=56 id=18589 win=0 rtt=21.2 ms 46 bytes from 128.0.0.1: flags=SA seq=7 ttl=56 id=57742 win=16616 rtt=21.7 ms 46 bytes from 128.0.0.1: flags=SA seq=8 ttl=56 id=57743 win=16616 rtt=21.6 ms 46 bytes from 128.0.0.1: flags=SA seq=9 ttl=56 id=57744 win=16616 rtt=21.3 ms --- 128.0.0.1 hping statistic --- 10 packets tramitted, 10 packets received, 0% packet loss round-trip min/avg/max = 21.1/21.3/21.7 ms Donde se pueden apreciar dos secuencias de IP ID
{}