Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+deb13+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 143 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+deb13+stable_amd64.deb Size: 86624 SHA512: 9a87d14071fe4c5af1da076e0fffd514cf2010107334ccf8de9bc9a2eb6df2bc9445065d63fc47abeb06600105156625c691c9d07362017c8b8fb166da5cb7f8 SHA256: 136627fe429296373c894f1a1d32c8040826ee1abfb065942407e177ff45c55b SHA1: 97c28716a4d2a41cf877f5730487731025638d75 MD5sum: 01cb7a424b50de245d6bfa5ba6c83c57 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3. Package: nginx-module-tcp-fingerprint-dbg Source: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+deb13+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 171 Depends: nginx-r1.30.6, nginx-module-tcp-fingerprint (= 1.30.6+0.1.0-9~gps1+deb13+stable) Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: debug Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint-dbg_1.30.6+0.1.0-9~gps1+deb13+stable_amd64.deb Size: 145244 SHA512: 133190a15587dc80ac225889c0f5e2f88cdd4541cbba3b42f240d42123867873f88b24b1ac69fad68811074427e77b669890c2a4bd429d05aa17756151d00f3d SHA256: 80eb0a23420c2e743b6a6144cb2ce16dae3e70782be8b999a3385b55b5f09d6f SHA1: 74cc390bfd4bd0cb0b5148a6fd55e98bca2cb8ba MD5sum: 30526bf9660b6b82431bcc6746d29a43 Description: debug symbols for the nginx-module-tcp-fingerprint Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables (debug symbols) Build-Ids: 1c3e04d901644f69c322483efadfde4eedb2557c f1bfcf5c71e4e07a483a1a490c5122dabb79dfe9 Package: sw-nginx-module-tcp-fingerprint Version: 1.30.5.1+0.1.0+p18.0.81.3.t261013.1029-9~gps1+deb13+plesk Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 141 Depends: libc6 (>= 2.17), sw-nginx-r1.30.5 Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/s/sw-nginx-module-tcp-fingerprint/sw-nginx-module-tcp-fingerprint_1.30.5.1+0.1.0+p18.0.81.3.t261013.1029-9~gps1+deb13+plesk_amd64.deb Size: 85172 SHA512: 96c92eff5e112f840e9ae326747e3ddf102ceea32659489edaf940856ea7b9b0b89d468c27150f85bb63a588527a791e855166e4266f6d0a32b7a655ca1c90e5 SHA256: bb8ca14ce9c4171d09cae7d1cfa30d06e82b73322c0f1e53c6577e497a9d82dc SHA1: 5a7e377f9dacd5363925bff664239359828eb13f MD5sum: 59b40da530147bcc333a542d4717dde3 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.