Categories: default, safe
Analyzes the clock skew between the scanner and various services that report timestamps.
At the end of the scan, it will show groups of systems that have similar median clock skew among their services. This can be used to identify targets with similar configurations, such as those that share a common time server.
You must run at least 1 of the following scripts to collect clock data: *
nmap -sV -sC <target>
Host script results: |_clock-skew: mean: -13s, deviation: 12s, median: -6s Post-scan script results: | clock-skew: | -6s: Majority of systems scanned | 3s: | 192.0.2.5 |_ 192.0.2.7 (example.com)
License: Same as Nmap--See https://nmap.org/book/man-legal.html