4 ms·
It works off of checking the SYN packet [0], which happens at the transport layer [1]. Once it gets to the application layer the information is not available un
by biot 14y ago
It works off of checking the SYN packet [0], which happens at the transport layer [1]. Once it gets to the application layer the information is not available unless the transport layer stores the information and provides a method to query a given connection.
[0] http://www.openbsd.org/faq/pf/filter.html#osfp http://www.openbsd.org/faq/pf/filter.html#osfp
[1] http://en.wikipedia.org/wiki/OSI_model http://en.wikipedia.org/wiki/OSI_model
- dredmorbius 14y agoI suspected something like this, but was hoping enough of the signature might survive for a daemon (or Java class acting as one) to take a peek.