Re: [Exim] p0f integration

Góra strony
Delete this message
Reply to this message
Autor: Christian Vogel
Data:  
Dla: Peter Bowyer
CC: exim-users
Temat: Re: [Exim] p0f integration
Hi,

On Fri, Jun 25, 2004 at 10:08:37AM -0100, Peter Bowyer wrote:
> p0f has a useful-looking 'query' mode, which listens on a named pipe and
> returns details of a connection given the source and destination IP
> address and port.


If your "names pipe" is a unix-domain stream socket, then the
exim ${readsocket} expansion probably is for you.

http://www.exim.org/exim-html-4.30/doc/html/spec_11.html

Otherwise, just write a simple server which listens on a
socket and forward your query to p0f accordingly.

        Chris


--
Christian Vogel -- chris@???