The question is straightforward and simple.

I want to know how to change the value of tcp timestamps manually in windows. I know how to disable them but i want to know the process of changing tcp timestamps value field to values that i want them to show. How can i achieve this.

Can we alter these timestamp values? I have read somehwere that it can be done and requires a detailed knowledge of how the kernel interprets system time and how this system time is reflected in the default OS generated fields in packet headers.

  • 3
    Why do you need to do this? – EEAA Jun 19 '17 at 11:27

The TCP timestamps values are part of the protocol, they are not data fields. They are used to protect against sequence space wrap-around. If you could and did change them then there is the potential for breaking the protocol, however since Windows is not open-source I don't think you'll be able to anyway without creating a whole new IP stack. You can get rid of them in Windows 7 by disabling the option but I don't know about Windows 10 (because I haven't checked)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.