I have two problems with p0f 2.0.6. 1) If I take out the -o option form P0FOPTIONS, then the init.d script does anyway execute p0f with the path to P0FLOGFILE 2) If I try to add the -Q option with a path to a socket, then I can't get p0f init.d script to start. I can fix problem 2 by taking away the quotes around ${P0FOPTIONS} and ${P0FLOGFILE} in the init.d script. If I do that, then I can easy start p0f and lissen to a specified socked (I just have to add "-Q /path/to/socked" before the "-tdlo" option. If I have more time, then I will look to make a more generic init.d script. cheers Steve --- Portage 2.1-r1 (hardened/x86/2.6, gcc-3.4.6/hardened, glibc-2.3.6-r4, 2.6.17.1 i686) ================================================================= System uname: 2.6.17.1 i686 AMD Athlon (TM) Gentoo Base System version 1.6.15 distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.3 [disabled] app-admin/eselect-compiler: 2.0.0_rc2-r1 dev-lang/python: 2.3.5-r2, 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.3 dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 2.0.0_rc1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-tbird -O2 -pipe -mmmx -m3dnow -fforce-addr -fomit-frame-pointer -falign-functions=4" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/postfix /var/bind /var/run/dspam /var/spool/dspam/opt-in /var/spool/dspam/opt-out /var/spool/dspam/txt /var/spool/vacation" CONFIG_PROTECT_MASK="/etc/env.d /etc/eselect/compiler /etc/gconf /etc/revdep-rebuild /etc/terminfo" CXXFLAGS="-march=athlon-tbird -O2 -pipe -mmmx -m3dnow -fforce-addr -fomit-frame-pointer -falign-functions=4" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig buildpkg distlocks metadata-transfer sandbox sfperms strict userpriv" GENTOO_MIRRORS="ftp://sunsite.cnlab-switch.ch/mirror/gentoo http://www.ibiblio.org/pub/Linux/distributions/gentoo http://gentoo.oregonstate.edu/" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/mnt/gentoo.overlay" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 GAPING_SECURITY_HOLE X509 acl acpi apache2 authdaemond autofs bcmath berkdb big-tables bzip2 calendar cdb cgi cli cluster crypt ctype curl curlwrappers dba dlloader drac enscript erandom exif expat extraengine fam fastcgi ffmpeg fla ftp gd gdbm gif gmp graphicsmagick graphviz gs hardened hardenedphp icc icc-pgo iconv idled idn imagemagick imap innodb inode ithreads j2ee java javacomm javamail jbig jboss jce jikes jms jmx jpeg jpeg2k jta kerberos krb4 large-domain lcms ldap logrotate lzw lzw-tiff maildir mbox mhash ming mmap mmx mpeg mpm-prefork mysql mysqli nagios-dns nagios-game nagios-ntp nagios-ping nagios-ssh ncurses netpbm neural nls nptl oav odbc openssl overlays pam pam-mysql pcntl pcre pear-db perl php pic png postfix python readline rrdtool ruby samba sasl sensord session sharedext silvercity simplexml skey snmp soap sockets spell spl sqlite srp sse ssl svg svgz symlink tcpd tidy tiff tokenizer truetype unicode unzip urandom usb userlocales vda vhosts virtual-users wmf xml xmlrpc xorg xsl yaz zip zlib elibc_glibc input_devices_mouse input_devices_keyboard kernel_linux userland_GNU" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS ---
Init script inproved in cvs
