Snort mailing list archives
Re: correct pflog comment in src/decode.h
From: Lawrence Belyeu via Snort-devel <snort-devel () lists snort org>
Date: Fri, 20 Oct 2017 17:33:13 -0500
Please take me off this list. No longer need it. On Oct 20, 2017 4:44 PM, "Markus Lude" <markus.lude () gmx de> wrote:
Hello, please correct the comment in src/decode.h Regards Markus --- src/decode.h.orig +++ src/decode.h @@ -835,9 +835,9 @@ typedef struct _SLLHdr { * Pflog1_Hdr: CVS = 1.3, DLT_OLD_PFLOG = 17, Length = 28 * Pflog2_Hdr: CVS = 1.8, DLT_PFLOG = 117, Length = 48 * Pflog3_Hdr: CVS = 1.12, DLT_PFLOG = 117, Length = 64 - * Pflog3_Hdr: CVS = 1.172, DLT_PFLOG = 117, Length = 100 + * Pflog4_Hdr: CVS = 1.16, DLT_PFLOG = 117, Length = 100 * - * Since they have the same DLT, Pflog{2,3}Hdr are distinguished + * Since they have the same DLT, Pflog{2,3,4}Hdr are distinguished * by their actual length. The minimum required length excludes * padding. */ _______________________________________________ Snort-devel mailing list Snort-devel () lists snort org https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
_______________________________________________ Snort-devel mailing list Snort-devel () lists snort org https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- correct pflog comment in src/decode.h Markus Lude (Oct 20)
- Re: correct pflog comment in src/decode.h Lawrence Belyeu via Snort-devel (Oct 20)
- Re: correct pflog comment in src/decode.h Joel Esler (jesler) via Snort-devel (Oct 21)
- Re: correct pflog comment in src/decode.h Lawrence Belyeu via Snort-devel (Oct 20)