In this paper we introduce a new technique to count the number of host behind a NAT. This technique based on TCP timestamp option, works with Linux and BSD system and therefore is complementary to the previous one base on IPID than does not work for those systems. Our implementation demonstrates the practicability of this method.
Time has something to tell us about network address translation
Available Media | Publication (Pdf) Slides (pdf) |
Conference | 12th Nordic Workshop on Secure IT Systems (NordSec) - 2007 |
Author | Elie Bursztein |
Citation |