[Snort-devel] correct pflog comment in src/decode.h

Lawrence Belyeu lbelyeu71 at gmail.com
Fri Oct 20 18:33:13 EDT 2017


Please take me off this list. No longer need it.

On Oct 20, 2017 4:44 PM, "Markus Lude" <markus.lude at gmx.de> wrote:

> Hello,
>
> please correct the comment in src/decode.h
>
> Regards
> Markus
>
> --- src/decode.h.orig
> +++ src/decode.h
> @@ -835,9 +835,9 @@ typedef struct _SLLHdr {
>   * Pflog1_Hdr:  CVS = 1.3,  DLT_OLD_PFLOG = 17,  Length = 28
>   * Pflog2_Hdr:  CVS = 1.8,  DLT_PFLOG     = 117, Length = 48
>   * Pflog3_Hdr:  CVS = 1.12, DLT_PFLOG     = 117, Length = 64
> - * Pflog3_Hdr:  CVS = 1.172, DLT_PFLOG     = 117, Length = 100
> + * Pflog4_Hdr:  CVS = 1.16, DLT_PFLOG     = 117, Length = 100
>   *
> - * Since they have the same DLT, Pflog{2,3}Hdr are distinguished
> + * Since they have the same DLT, Pflog{2,3,4}Hdr are distinguished
>   * by their actual length.  The minimum required length excludes
>   * padding.
>   */
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.snort.org
> https://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20171020/b6e72757/attachment.html>


More information about the Snort-devel mailing list