p0f - Passive OS fingerprinting tool

Distribution: Debian 7 (Wheezy)
Repository: Debian Main amd64
Package name: p0f
Package version: 2.0.8
Package release: 2
Package architecture: amd64
Package type: deb
Installed size: 168 B
Download size: 72.09 KB
Official Mirror: ftp.br.debian.org
p0f performs passive OS detection based on SYN packets. Unlike nmap and queso, p0f does recognition without sending any data. Additionally, it is able to determine the distance to the remote host, and can be used to determine the structure of a foreign or local network. When running on the gateway of a network it is able to gather huge amounts of data and provide useful statistics. On a user-end computer it could be used as powerful IDS add-on. p0f supports full tcpdump-style filtering expressions, and has an extensible and detailed fingerprinting database.



    Binary package: p0f_2.0.8-2_amd64.deb
    Source package: p0f

    Install Howto

    1. Update the package index:
      # sudo apt-get update
    2. Install p0f deb package:
      # sudo apt-get install p0f


    • /etc/p0f/p0f.fp
    • /etc/p0f/p0fa.fp
    • /etc/p0f/p0fr.fp
    • /usr/sbin/p0f
    • /usr/share/doc/p0f/CREDITS.gz
    • /usr/share/doc/p0f/KNOWN_BUGS.gz
    • /usr/share/doc/p0f/README.gz
    • /usr/share/doc/p0f/TODO.gz
    • /usr/share/doc/p0f/changelog.Debian.gz
    • /usr/share/doc/p0f/copyright
    • /usr/share/doc/p0f/examples/p0frep
    • /usr/share/man/man1/p0f.1.gz


    2008-08-27 - Pierre Chifflier <pollux@debian.org> p0f (2.0.8-2) unstable; urgency=low * New maintainer, thanks to James Troup for his work. * Bump standards version to 3.8.0 * Fix lintian warnings: - debian-rules-ignores-make-clean-error - old-fsf-address-in-copyright-file

    2007-08-05 - James Troup <james@nocrew.org> p0f (2.0.8-1) unstable; urgency=low * New upstream release. Closes: #382622, #388203 * Fixes buffer overflow in argument parsing. Closes: #392455 * p0f.1: patch from Stephen Gran <sgran@debian.org> to fix unescaped '-'s and misplaced .fp. Closes: #341967 * debian/control (Build-Depends): switch to libpcap0.8-dev. * debian/control (Standards-Version): bump to

    2004-11-27 - James Troup <james@nocrew.org> p0f (2.0.5-1) unstable; urgency=low * New upstream release. Closes: #271643 * debian/rules (binary-arch): install upstream manpage. Closes: #248346 * p0f-query.c: apply patch from Colin Phipps to fix a typo in sizeof usage which was causing the query interface to leak OS details from old cache entries into new entries. Closes: #276373

    2004-05-10 - James Troup <james@nocrew.org> p0f (2.0.3-1) unstable; urgency=low * New upstream release. * debian/rules: Patch from Ingo Saitz <ingo@debian.org> to install fingerprints correctly (i.e. all of the, into /etc/p0f/). * debian/conffiles: likewise. Closes: #214137, #240227

    2003-09-26 - James Troup <james@nocrew.org> p0f (2.0.2-1) unstable; urgency=low * New upstream release.

    2003-09-03 - James Troup <james@nocrew.org> p0f (2.0.1-1) unstable; urgency=low * New upstream release. * debian/rules: update copyright and version. * debian/copyright: likewise. * 01_optional-promiscuous.dpatch: dropped; merged upstream (albeit with the meaning of -p reversed). * 02_manpage-section.dpatch: dropped; manpage has been dropped upstream(!). * debian/control (Build-Depends): drop dpatch - unused. * debian/rules: don't include /usr/share/dpatch/dpatch.make. * debian/rules (build): don't depend on patch-stamp. * debian/rules (clean): don't depend on unpatch and don't remove debian/patched. * debian/control (Build-Depends): drop libmysqlclient10-dev - new upstream release no longer supports logging to a mysql database. * debian/rules (build): don't try to build p0f-mysql; just build the default target. * debian/rules (binary-arch): mysql/p0f-mysql.conf and mysql/db.sql. are gone. * debian/conffiles: drop /etc/p0f-mysql.conf. * debian/rules (binary-arch): p0f.init's gone. * debian/rules (binary-arch): install additional documents doc/KNOWN_BUGS and doc/TODO. ChangeLog's gone. CREDITS moved to doc/. * debian/rules (binary-arch): p0f.1 is gone. * debian/rules (binary-arch): install p0frep executable. * debian/control (Standards-Version): bump to