Script clock-skew

Script types:
Categories: default, safe
Download: https://svn.nmap.org/nmap/scripts/clock-skew.nse

Script Summary

Analyzes the clock skew between the scanner and various services that report timestamps.

At the end of the scan, it will show groups of systems that have similar median clock skew among their services. This can be used to identify targets with similar configurations, such as those that share a common time server.

You must run at least 1 of the following scripts to collect clock data: *

Example Usage

nmap -sV -sC <target>

Script Output

Host script results:
|_clock-skew: mean: -13s, deviation: 12s, median: -6s

Post-scan script results:
| clock-skew:
|  -6s: Majority of systems scanned
|  3s:
|    192.0.2.5
|_   192.0.2.7 (example.com)

Requires

• datetime
• formulas
• math
• nmap
• outlib
• stdnse
• table

---

Author:

• Daniel Miller

License: Same as Nmap--See https://nmap.org/book/man-legal.html