Snort mailing list archives
Re: Barnyard and ACID question
From: Wozz <wozz+snort () wookie net>
Date: Mon, 5 Nov 2001 17:57:38 -0700
On Mon, Nov 05, 2001 at 04:11:49PM -0800, roel () SiliconDefense com wrote:
Wozz, Looks like a byteswap somewhere, guessing a ntohs()/htons() missing somewhere. 80 -> 0x50 20480 -> 0x5000 57561 -> 0xe0d9 55776 -> 0xd9e0 Curiosity what platform are you running this on? (I'm guessing this only occurs on either big endian or little endian machines, but not both.)
Sensor and barnyard are on OpenBSD 2.8-stable/i386 (single-proc PIII) Mysql and ACID are on FreeBSD 4.3-RELEASE-P12/i386 (multi-proc Xeon) _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Barnyard and ACID question Wozz (Nov 05)
- Re: Barnyard and ACID question roel (Nov 05)
- Re: Barnyard and ACID question Wozz (Nov 05)
- Re: Barnyard and ACID question Andrew R. Baker (Nov 06)
- <Possible follow-ups>
- RE: Barnyard and ACID question Steve Halligan (Nov 06)
- Re: Barnyard and ACID question Andrew R. Baker (Nov 06)
- RE: Barnyard and ACID question Steve Halligan (Nov 06)
- Re: Barnyard and ACID question Andrew R. Baker (Nov 06)
- Re: Barnyard and ACID question Wozz (Nov 07)
- Re: Barnyard and ACID question Wozz (Nov 07)
- Re: Barnyard and ACID question Andrew R. Baker (Nov 06)
- RE: Barnyard and ACID question Steve Halligan (Nov 06)
- Re: Barnyard and ACID question Andrew R. Baker (Nov 06)
- Re: Barnyard and ACID question roel (Nov 05)