apt-get update
apt-get install -y libpcap-dev

wget http://lcamtuf.coredump.cx/p0f3/releases/p0f-latest.tgz
tar -xvzf p0f-latest.tgz
cd p0f-[0-9]*
make all && ( cp -p p0f /usr/local/sbin/ ; cp -p p0f.fp /usr/local/etc/ ; mkdir -p /usr/local/share/doc/p0f ; cp -p docs/* /usr/local/share/doc/p0f/ )
cd tools
make all && cp -p p0f-client p0f-sendsyn p0f-sendsyn6 /usr/local/bin/
cd ../..

#wget https://mta.org.ua/p0f/db/p0f.fp-3.09b -O/etc/p0f.fp
curl -L -o - https://mta.org.ua/p0f/db/p0f.fp-3.09b.diff | patch /etc/p0f.fp

wget https://mta.org.ua/p0f/ubuntu-16t/etc/logrotate.d/p0f -O/etc/logrotate.d/p0f

echo 'P0F_IFACE="eth0"' > /etc/default/p0f
echo '#P0F_SOCKET="/var/run/p0f.sock"' >> /etc/default/p0f
echo '#P0F_PIDFILE="/var/run/p0f.pid"' >> /etc/default/p0f
echo '#P0F_FINGERPRINT_DATABASE="/usr/local/etc/p0f.fp"' >> /etc/default/p0f
echo '#P0F_EXTRA_COMMAND_ARGS="-o /var/log/p0f.log"' >> /etc/default/p0f

wget https://mta.org.ua/p0f/ubuntu-16/etc/init.d/p0f -O/etc/init.d/p0f
chmod +x /etc/init.d/p0f

systemctl enable p0f
systemctl start p0f