When it's _not_ tcp and it's _not_ udp then there is no sport or dport
involved. Remove the marked lines:
if (stable[num].proto == "tcp") {
...
} else if (stable[num].proto == "udp") {
...
} else if (stable[num].proto == "icmp") {
...
} else {
split('=',fields[3],crap,src);
split('=',fields[4],crap,dst);
- split('=',fields[5],crap,srcpt);
- split('=',fields[6],crap,dstpt);
- stable[num].src = src + "," + srcpt;
- stable[num].dst = dst + "," + dstpt;
}
Ramin
On Mon, Feb 25, 2002 at 09:20:25AM -0800, Phil Dibowitz wrote:
> Guillaume Morin wrote:
>
> >
> >
> >I've tested this patch on both big and little endian archs, it works
> >fine.
> >
>
>
> That was the other problem... c was used in more than one place. So, your
> new patch should work.
>
> It wasn't quite the way I did it, but for those needing a fix, that'll
> work. New version should be out by Wednesday.
>
>
> Phil
>
> --
> Insanity Palace of Metallica
> http://www.ipom.com
> [EMAIL PROTECTED]
> --
>
