Infer machine boot time/up-time from network packets?
Is it possible to infer machine boot time/up-time from network packets? If so, which packets would I use and how would I do this?
Would the answer to the above questions change if I had access to the data of an authoritative DNS server?
Comments
Why specifically an authoritative DNS server?
I am doing a research project in partnership with a company. The company has authoritative DNS servers.
By "boot time" do you mean "how long the machine took to boot" or do you mean "the wall-clock time when the machine booted"?
By "up-time" do you mean "how long the machine has been running since it was last booted"?
by boot time, I mean the wall-clock time when the machine booted. and yes, by up-time, i mean how long the machine has been running since it was last booted