/home/p0f-logs/socket

[valdikss]

/home/p0f-logs/socket

[ValdikSS]

Excuse me? I don't understand.

[leakeung]

Hello, I am Chinese, English is not very good!
In PHP, this line of code, in the index.
The exec ("/home/p0f - mtu/tools/p0f - client/home/p0f - logs/socket ". $_SERVER [' REMOTE_ADDR], $pof_output);
The first argument why this happen

[ValdikSS]

It executes p0f-client with socket path. p0f-client is a client you can find in "tools" folder of p0f.

[leakeung]

I have seen https://github.com/ValdikSS/p0f-mtu, tried to install, but failed in the end.

[ValdikSS]

To build client, you should run "make" in p0f "tools" folder
https://github.com/ValdikSS/p0f-mtu/tree/master/tools

[leakeung]

Enter the tools folder, and then run "make"?

[ValdikSS]

Yes.

[leakeung]

After the make?

[ValdikSS]

After make you can run client.

./p0f-client

[leakeung]

Can directly enter the command window. / p0f - client? So you can perform?
Finally in the PHP can also use the exec ("/home/p0f - mtu/tools/p0f - client/home/p0f - logs/socket ". $_SERVER [' REMOTE_ADDR], $pof_output); ??

[leakeung]

Hello, after I make, and then execute"./p0f-client /home/p0f-logs/socket ip" the following information:
[-] SYSTEM ERROR : Can't connect to API socket.
Location : main(), p0f-client.c:128
OS message : No such file or directory

[ValdikSS]

You should run p0f first, then use the client.

[leakeung]

In p0f - mtu folder one build.Sh need to perform?

[ValdikSS]

Yes

[leakeung]

run p0f first?In p0f-mtu folder, also need to make first?

[ValdikSS]

Please read this

http://lcamtuf.coredump.cx/p0f3/README

[leakeung]

I'm sorry, I ability is limited.
run . / p0f is working,
but cd tools to run "./p0f-client xx xx " is failure.
notice: SYSTEM ERROR : Can't connect to API socket.

[ValdikSS]

./p0f -s socket
./tools/p0f-client ./socket

[leakeung]

run "./tools/p0f-client ./socket IP" no response? I input the wrong? So does change the IP.

[ValdikSS]

You should run p0f as root in one window and client in another. p0f should be running when you use client.

[leakeung]

Thank you, must keep p0f background continues to run. When users request was then extracted data in the cache

[ValdikSS]

Yes.