Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2004+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 70 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+ubuntu2004+stable_amd64.deb Size: 10492 SHA512: f2a5b0acc6635b80030080107ab8f9d7339879bb25fea1a39f0db6b9651eb11334c9f1f87cf37137ff63f4372f72c8240cf40550ed63739680e114846acb74ee SHA256: 74c9621584b2330dde44b0151bd58e435010b50a872e76afd0a99e91da268bab SHA1: 48cd3faf3096d53e401c2d1ebf67c4cb4128217a MD5sum: 2dc86245de5db49529db82585a55dc96 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3. Package: nginx-module-tcp-fingerprint-dbg Source: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2004+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 114 Depends: nginx-r1.30.6, nginx-module-tcp-fingerprint (= 1.30.6+0.1.0-9~gps1+ubuntu2004+stable) Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: debug Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint-dbg_1.30.6+0.1.0-9~gps1+ubuntu2004+stable_amd64.deb Size: 87356 SHA512: d62c98dd3341f7d033121e25c6ad8d1f9040eba16db0a1d5097ac7fccfbc1785c4a212fd9ec369d0245813ab5af3c56b9ea85202ca2018d834901dd96dd1c359 SHA256: feef0824bfa504f1f83931177ccb599751e941168c612e6bc045531d9212b4f2 SHA1: e062cc87b7edf4e7dff06ba6f001fd14a1516fc4 MD5sum: 3949c85f11f07e3f68825515d77c6b52 Description: debug symbols for the nginx-module-tcp-fingerprint Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables (debug symbols) Build-Ids: 2b63485becb8d5f94bbddc2a5955f1cbf0c2d36c 74f6a8015c31935e15a9f3d6169844ae9ee025ba Package: sw-nginx-module-tcp-fingerprint Version: 1.30.5.1+0.1.0+p18.0.81.3.t261013.1029-9~gps1+ubuntu2004+plesk Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 68 Depends: libc6 (>= 2.17), sw-nginx-r1.30.5 Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/s/sw-nginx-module-tcp-fingerprint/sw-nginx-module-tcp-fingerprint_1.30.5.1+0.1.0+p18.0.81.3.t261013.1029-9~gps1+ubuntu2004+plesk_amd64.deb Size: 10268 SHA512: 6fbbae96595775b8dbe1ac922fbbc8ee43ee16047a03f694ddc670c48e315dcf6d35469e41bf318d6436064971a9c2ac3cdc2b90b6509ada96e2e15d4aa10013 SHA256: 6f886a743f982eab6a6683d5c2f0728816e8b17ca18e1059b8c114bd78d80f57 SHA1: 2fb8a4bf6ed81bee5e17bee768a4be2514f3b7ad MD5sum: 74d7061c806000d6d206b89868b8180d Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.