[Snort-devel] Re: [Snort-users] Barnyard and ACID question

Wozz wozz+snort at ...73...
Mon Nov 5 16:58:05 EST 2001


On Mon, Nov 05, 2001 at 04:11:49PM -0800, roel at ...60... wrote:
> Wozz,
> 
> Looks like a byteswap somewhere, guessing a ntohs()/htons() missing somewhere.
> 
> 80 -> 0x50
> 20480 -> 0x5000
> 
> 57561 -> 0xe0d9
> 55776 -> 0xd9e0
> 
> Curiosity what platform are you running this on? (I'm guessing this only occurs
> on either big endian or little endian machines, but not both.)
> 

Sensor and barnyard are on OpenBSD 2.8-stable/i386 (single-proc PIII)

Mysql and ACID are on FreeBSD 4.3-RELEASE-P12/i386 (multi-proc Xeon)




More information about the Snort-devel mailing list