From a5ad864e13021db412b4adc1d05c72a8dad74102 Mon Sep 17 00:00:00 2001
From: Justin Azoff <justin@bouncybouncy.net>
Date: Wed, 9 Jan 2019 09:46:08 -0500
Subject: [PATCH] Use more efficient method to grab the protocol.

get_conn_transport_proto needs to use sessions->FindConnection and do a
hash lookup to find the connection while get_port_transport_proto just
looks at the port directly.
---
 scripts/base/protocols/dns/main.bro | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/base/protocols/dns/main.bro b/scripts/base/protocols/dns/main.bro
index 8ce14c8e18..fdc08f6c02 100644
--- a/scripts/base/protocols/dns/main.bro
+++ b/scripts/base/protocols/dns/main.bro
@@ -162,7 +162,7 @@ function new_session(c: connection, trans_id: count): Info
 	info$ts       = network_time();
 	info$id       = c$id;
 	info$uid      = c$uid;
-	info$proto    = get_conn_transport_proto(c$id);
+	info$proto    = get_port_transport_proto(c$id$resp_p);
 	info$trans_id = trans_id;
 	return info;
 	}