When hackers attack other people's computers, the first thing they usually do is to determine whether the host is online. The method for judging is simple, that is, using the Ping command. The method is to enter "Ping IP Address" at the command prompt. If the returned information is "Reply from 221.231.114.219: bytes = 32 time = 23 ms TTL = 128 ", the host is on, that is, the other computer is in use.
Because the vulnerabilities and intrusion methods of different operating systems are different, hackers will also judge the operating system used by the other Party based on the information returned by the ping command. The result is the TTL value. Ba Ge Network (http://www.it8g.com) Remind everyone in general Windows 2000/XP Computer TTL value is 120, 128, and Unix/Linux system returned TTL value is 64 or 255. We all know that Unix/Linux vulnerabilities and intrusion methods are much more difficult than Windows, so we can modify the TTL value returned by the system to deceive hackers.
Run "regedit" and open registry editor. Select "HKEY_LOCAL_MACHINESystemCurrentControlSetServicesTcpipParameters" to create a "DefaultTTL" Dword key value, modify the value to "255" in decimal format or "FF" in hexadecimal format, and restart the computer to make the settings take effect.
Now, when the other party ping the computer again, it will return the incorrect TTL value, so that the other party may mistakenly think that the operating system used is Unix/Linux, thus achieving the same effect, let it go farther and farther on the wrong road.