Which hping3 command includes a TCP timestamp option to test firewall behavior?

Which hping3 command includes a TCP timestamp option to test firewall behavior?

• A. hping3 -1 10.0.0.25
• B. hping3 -A 10.0.0.25 -p 80
• C. hping3 192.168.1.103 -Q -p 139 -s
• D. hping3 -S 72.14.207.99 -p 80 --tcp-timestamp

Answer: (D)

Testing how a firewall handles TCP options by sending a packet that includes the TCP timestamp option. The TCP timestamp is one of the optional fields in the TCP header; enabling it with the timestamp option lets you see whether the firewall allows that option through or strips/filters it, which is a common security device behavior to scrutinize. When you combine this option with a SYN to a service port, you simulate a normal connection attempt while explicitly requesting the timestamp to be carried in the packet. The best command uses a SYN to a target on port 80 and includes the TCP timestamp option, ensuring the test actually exercises the TCP header options rather than just sending a basic TCP packet or an ICMP/other-type probe. The other commands do not enable or involve the TCP timestamp option, so they don’t reliably test how the firewall handles TCP options.

Testing how a firewall handles TCP options by sending a packet that includes the TCP timestamp option. The TCP timestamp is one of the optional fields in the TCP header; enabling it with the timestamp option lets you see whether the firewall allows that option through or strips/filters it, which is a common security device behavior to scrutinize. When you combine this option with a SYN to a service port, you simulate a normal connection attempt while explicitly requesting the timestamp to be carried in the packet.

The best command uses a SYN to a target on port 80 and includes the TCP timestamp option, ensuring the test actually exercises the TCP header options rather than just sending a basic TCP packet or an ICMP/other-type probe. The other commands do not enable or involve the TCP timestamp option, so they don’t reliably test how the firewall handles TCP options.