Vincent wrote: > Try to change line 87 and line 89 to: > 87 $hostport =~ /^(?: inet: )? ([^:]*) : ([^:]*) /six > 88 or die "Bad p0f method syntax: $hostport"; > 89 my($host,$port) = ($1, $2); my($sock);
> and see if it make any difference. > If it is not maRBL problem, then make sure p0f capture the packet right at > command line: > p0f -i eth0 -l 'tcp dst port 25' 2>&1 > I once forgot to run p0f with -l option (outputs data in line-per-record > style) and p0f-analyzer would not parse the p0f packet information right. > Hope that helps > Vincent Li > http://bl0g.blogdns.com Thanks Vincent, but alas, it did not solve the problem. Gary V ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/