Snort mailing list archives
Re: [Snort-devel] Problem: Snort Logging to database, problem with ip and port number formats
From: Brian <bmc () snort org>
Date: Wed, 4 Aug 2004 17:30:54 -0400
On Tue, Jul 27, 2004 at 12:18:44PM +0100, Thomas Murtagh wrote:
+-----+------+------------+------------+--------+ ----+----------+--------+--------+----------+---- | sid | cid | ip_src | ip_dst | ip_ver | +-----+------+------------+------------+--------+ ----+----------+--------+--------+----------+---- | 1 | 1000 | 3232245761 | 3232245900 | 4 | AS YOU CAN SEE THE ABOVE ip_src and ip_dest are values not valid IP addresses:
Uh, yes those are valid IP addresses. The IP is stored as a uint32. inet_ntoa is your friend.
| sid | cid | tcp_sport | tcp_dport | tcp_seq | | 1 | 1000 | 59832 | 116 | 0 | AS YOU CAN SEE THE ABOVE tcp_sport and tcp_dport values are not valid port numbers
How are 116 or 59832 not a valid port numbers? -b ------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Problem: Snort Logging to database, problem with ip and port number formats Thomas Murtagh (Jul 27)
- Re: Problem: Snort Logging to database, problem with ip and port number formats sekure (Jul 27)
- Re: [Snort-devel] Problem: Snort Logging to database, problem with ip and port number formats Brian (Aug 04)