[Snort-users] unpacking IP follow up

Don Murdoch djmurd at ...5190...
Sun Aug 1 18:24:02 EDT 2004

	OH - after I had my senior moment - I did notice from the ACID
	page that you can write

	"Select inet_ntoa( ip_src ) from iphdr" 
	and it does work.  SO ... now that I am totally embarrassed, I 
	would still like to know if anyone has a code chunk they can
	share which shows how to do this "the hard way".

	Much ablidged


More information about the Snort-users mailing list