Re: pfctl problem with osfp parser

2023-05-25 Thread Alexandr Nedvedicky
Hello, On Thu, May 25, 2023 at 08:12:38PM +0300, wrote: > Thank you for looking, then another question: will you develop this > functional, or it will stay as is? I need to get familiar with fingerprints first. As Stuart said it's not just being used by pf but also

Re: pfctl problem with osfp parser

2023-05-25 Thread Иван Иванов
Thank you for looking, then another question: will you develop this functional, or it will stay as is? чт, 25 мая 2023 г. в 18:54, Stuart Henderson : > On 2023/05/25 17:40, Alexandr Nedvedicky wrote: > > Hello, > > > > I took a look at signatures: > > >

Re: pfctl problem with osfp parser

2023-05-25 Thread Stuart Henderson
On 2023/05/25 17:40, Alexandr Nedvedicky wrote: > Hello, > > I took a look at signatures: > > https://tools.netsa.cert.org/p0f/p0f.fp.2012032901 signatures file (pf.os), > > This change is not about updating parser it looks like it will > also require to update matching stuff in kernel. I have

Re: pfctl problem with osfp parser

2023-05-25 Thread Alexandr Nedvedicky
Hello, I took a look at signatures: > https://tools.netsa.cert.org/p0f/p0f.fp.2012032901 signatures file (pf.os), This change is not about updating parser it looks like it will also require to update matching stuff in kernel. I have not looked at all details yet. below is fingerprint entry