The security/p0f3 port
p0f3-3.09b – passive OS fingerprinting tool (cvsweb github mirror)
Description
P0f is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way. Version 3 is a complete rewrite of the original codebase, incorporating a significant number of improvements to network-level fingerprinting, and introducing the ability to reason about application-level payloads (e.g., HTTP). The tool can be operated in the foreground or as a daemon, and offers a simple real-time API (via unix domain sockets) for third-party components that wish to obtain additional information about the actors they are talking to.WWW: http://lcamtuf.coredump.cx/p0f.shtml
Maintainer
The OpenBSD ports mailing-list
Categories
Build dependencies
Files
- /etc/p0f/
- /etc/p0f/p0f3.fp
- /usr/local/sbin/p0f3
- /usr/local/share/doc/p0f3/
- /usr/local/share/doc/p0f3/COPYING
- /usr/local/share/doc/p0f3/ChangeLog
- /usr/local/share/doc/p0f3/README
- /usr/local/share/doc/p0f3/TODO
- /usr/local/share/doc/p0f3/existential-notes.txt
- /usr/local/share/doc/p0f3/extra-sigs.txt
- /usr/local/share/examples/p0f3/
- /usr/local/share/examples/p0f3/p0f3.fp