Index_T

---

T

tarballs, 5, 25

TCP connections

BO2k and, 265

Netcat and, 4, 8, 12

nmap and, 65, 67

tcpdump and, 474-475

TCP flags, 65, 67, 433

TCP headers, 75, 109, 782

TCP/IP stacks

OS fingerprinting and, 109-110

TCP scans and, 68

tools for, 551-568

TCP packets

NULL, 431

OS fingerprinting, 75, 109-110

packet content expressions, 475-478

packet filters, 434

port scanning and, 65-68

tcpdump. See tcpdump program

TCP Ping technique, 66

TCP pings, 66, 77, 80

TCP ports

hiding, 284-285

port 0, 257

port 80, 257, 287

port 111, 115

port 139, 142

port 5900, 256-257

port 65535, 257

scanning for, 66-69

TCP reverse ident scanning, 74-75

TCP streams, 483-484

TCP Term tool, 91, 93

TCP three-way handshake, 65, 67

TCP wrappers, 81, 100, 189

tcpdump program

command-line options, 468-472

described, 465

examples, 475-478

implementation, 466-467

installing on Unix, 465-466

installing on Windows, 466

output, 473-475

packet injection and, 566-567

qualifiers, 467-468

tcpkill tool, 494-495

tcpnice tool, 495

tcpsic program, 554-555

TCT (The Coroner's Toolkit), 698-710

telnet clients, 5, 23

TELNET option, 5-6, 8

Telnet program, 104

telnet servers, 5, 15, 74

Terminal Services, 147

TFTP servers, 12

THC-amap utility, 85-90

THC-Hydra tool, 237-241

THC-Scan tool, 542-549

The Coroner's Toolkit (TCT), 698-710

three-way handshake, 65, 67

time command, 658

time-to-live. See TTL

Titan tool, 244-247

tl.cfg file, 532-535

tlcfg.exe program, 535

tokens, 748

ToneLoc tool, 532-542

TOS (type of service), 421

traceroute output, 429-430

traceroute tool, 426-430

traffic

ICMP, 275-279, 555-556

ICMP Ping, 76-77

NBT, 136

NFS, 493

redirecting, 443

SSH, 33-34, 474

UDP, 69-70

X traffic, 33-34

traps, 24

Trinux tool, 572-577, 652

Tripwire database, 344-345

Tripwire Manager, 351-357

Tripwire masks, 346-348

Tripwire Server, 352

Tripwire tool, 285, 342-358

troubleshooting

errors. See errors

packet filters, 449-451

ports, 449-451

services, 449-451

trusted boot disks, 625-626, 652

TTL (time-to-live), 429

TTL field, 426

TTL value, 421

tunnels

IPSec, 451

Netcat and, 20

SSH, 33-35

stunnel, 191-194

vulnerability scans, 191-194

X traffic and, 33-34

twadmin utility, 345

two-factor authentication, 549

Twofish encryption, 25

twprint utility, 344-345

type of service (TOS), 421

type qualifiers, 467

---