Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 03:28:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Protocol field for NULL encapsulation was read big endian.

Browse source
This commit is contained in:
Seth Hall 2012-02-06 15:49:03 -05:00
parent 1f58ac875b
commit eca3261077
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/PktSrc.cc
View file

@ -191,7 +191,7 @@ void PktSrc::Process()
switch ( datalink ) { switch ( datalink ) {
case DLT_NULL: case DLT_NULL:
{ {
protocol = (data[3] << 24) + (data[2] << 16) + (data[1] << 8) + data[0]; protocol = (data[0] << 24) + (data[1] << 16) + (data[2] << 8) + data[3];
if ( protocol != AF_INET && protocol != AF_INET6 ) if ( protocol != AF_INET && protocol != AF_INET6 )
{ {