in reply to Re^3: p0fq.pl and pack?
in thread p0fq.pl and pack?

I add
print join(" ", map { sprintf "%#02x", $_ } unpack("C*",$response)), " +\n";
it print out bytes like

0xd 0xef 0xac 0xed 0x78 0x56 0x34 0x12 0x1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Replies are listed 'Best First'.
Re^5: p0fq.pl and pack
by ikegami (Patriarch) on Feb 20, 2007 at 04:08 UTC
    ... = unpack ("N V ...", $response);

    I don't see how "L L ..." would have worked on the PC (or any machine).

      It does work on my PC running Fedora Core 3

      p0f -Q /var/run/p0f.sock -0 'dst port 443' >> /dev/null &

      ./p0fq.pl /var/run/p0f.sock src_host 0 dst_host 443

      I get:

      Genre: Linux
      Detailes: 2.6, seldom 2.4 (older, 4)
      Distance: 0 hops
      Link: ethernet/modem
      Uptime: 207 hrs

        What about the Id? The Magic and the Id are in different orders, yet you use L for both.