wget ftp://ftp.funet.fi/pub/Linux/mirrors/fedora/linux/development/rawhide/source/SRPMS/p/p0f-3.08b-1.fc22.src.rpm
rpmbuild --rebuild p0f-3.08b-1.fc22.src.rpm
rpm -Uvh /usr/src/redhat/RPMS/i386/p0f-3.08b-1.el6.i386.rpm

wget https://mta.org.ua/p0f/db/p0f.fp-3.09b -O/etc/p0f.fp
#curl -L -o - https://mta.org.ua/p0f/db/p0f.fp-3.09b.diff | patch /etc/p0f.fp

wget https://mta.org.ua/p0f/redhat/etc/logrotate.d/p0f -O/etc/logrotate.d/p0f

echo 'P0F_IFACE="eth0"' > /etc/sysconfig/p0f
echo '#P0F_SOCKET="/var/run/p0f.sock"' >> /etc/sysconfig/p0f
echo '#P0F_FINGERPRINT_DATABASE="/etc/p0f/p0f.fp"' >> /etc/sysconfig/p0f
echo '#P0F_EXTRA_COMMAND_ARGS="-o /var/log/p0f.log"' >> /etc/sysconfig/p0f

wget http://mta.org.ua/p0f/redhat/etc/rc.d/init.d/p0f -O/etc/rc.d/init.d/p0f
chmod +x /etc/rc.d/init.d/p0f
chkconfig --level 35 p0f on

service p0f start