https://netacoding.com/tags/network-fingerprinting/ Recent content in Network-Fingerprinting on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Fri, 24 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/windows-icmp-timestamp-bugs/ Fri, 24 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/windows-icmp-timestamp-bugs/ EnableICMPTimestampRep=0 does not suppress ICMP Timestamp Replies (Type 14) on Windows 11. Ghidra RE of tcpip.sys 10.0.26100.8457 confirms Ipv4pHandleTimestampRequest generates T14 unconditionally, plus a second bug: Receive/Transmit timestamps written little-endian in violation of RFC 792. Only effective mitigation: WFP firewall rule. https://netacoding.com/posts/icmp-timestamp-internals/ Tue, 07 Jul 2026 00:00:00 +0000 https://netacoding.com/posts/icmp-timestamp-internals/ Depth-8 ftrace analysis of icmp_timestamp() in the Linux kernel: full call chain from ip_rcv() to ICMP Type 14 reply generation, payload length threshold behavior, conntrack interaction, ts_ori unconditional echo across the full 32-bit range, and six documented deviations from RFC 792.