The time spent in GC pauses for the mark and sweep phases of a garbage collection are based on the number of live objects on the heap.

The attacker may obtain such a list by performing a simple ping sweep using any number of freeware tools, such as Angry IP scanner or Nmap.