slackbuilds_ponce/network/p0f
Robby Workman 143991a46e Entire Repo: Remove APPROVED field from .info files
This field used to make sense in our pre-git days, but
the Signed-Off-By: line serves the same purpose (and
even more) now, so APPROVED has been rejected.  ;-)

Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
2012-08-14 23:22:50 -05:00
..
doinst.sh network/p0f: Updated for version 3.05b. 2012-06-03 15:21:14 -05:00
p0f.info Entire Repo: Remove APPROVED field from .info files 2012-08-14 23:22:50 -05:00
p0f.SlackBuild network/p0f: Updated for version 3.05b. 2012-06-03 15:21:14 -05:00
README network/p0f: Updated for version 3.05b. 2012-06-03 15:21:14 -05:00
slack-desc network/p0f: Updated for version 3.05b. 2012-06-03 15:21:14 -05:00

P0f is a tool that utilizes an array of sophisticated, purely passive
traffic fingerprinting mechanisms to identify the players behind any
incidental TCP/IP communications (often as little as a single normal SYN)
without interfering in any way. Version 3 is a complete rewrite of the
original codebase, incorporating a significant number of improvements
to network-level fingerprinting, and introducing the ability to reason
about application-level payloads (e.g., HTTP).

To build and install the optional signature and API tools, specify
TOOLS=yes to the SlackBuild, for example

  TOOLS=yes sh p0f.SlackBuild

If you are upgrading from p0f version 2.0.8, please note that the files
/etc/p0f/p0f{a,o,r}.fp are no longer used and can be removed.