p0f to fingerprint network OSs from traffic captures.
p0f has a feature allowing it to be set up as a daemon and listen in the background for a connection from a
p0f-client (ie: https://pypi.python.org/pypi/p0f/0.1.1)
To set up
p0f as a daemon I should run ie:
p0f -i eth0 -s path/to/unix_socket
But I don't get the part about
path/to/unix_socket. I'm relatively new to Linux and I'm use to having servers apps setting up their sockets themselves?
Can anyone indicate how to set up
p0f as a daemon?