Snort mailing list archives

Re: Barnyard and ACID question


From: Wozz <wozz+snort () wookie net>
Date: Mon, 5 Nov 2001 17:57:38 -0700

On Mon, Nov 05, 2001 at 04:11:49PM -0800, roel () SiliconDefense com wrote:
Wozz,

Looks like a byteswap somewhere, guessing a ntohs()/htons() missing somewhere.

80 -> 0x50
20480 -> 0x5000

57561 -> 0xe0d9
55776 -> 0xd9e0

Curiosity what platform are you running this on? (I'm guessing this only occurs
on either big endian or little endian machines, but not both.)


Sensor and barnyard are on OpenBSD 2.8-stable/i386 (single-proc PIII)

Mysql and ACID are on FreeBSD 4.3-RELEASE-P12/i386 (multi-proc Xeon)

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: