[Bro-Dev] new IPv6 code

Seth Hall seth at icir.org
Wed Feb 15 13:19:27 PST 2012


On Feb 15, 2012, at 4:09 PM, Robin Sommer wrote:

> - PktSrc.cc:
> 
>    -       protocol = (data[3] << 24) + (data[2] << 16) + (data[1] << 8) + data[0];
>    +       protocol = (data[0] << 24) + (data[1] << 16) + (data[2] << 8) + data[3];
> 
>  Does that mean this was buggy before?


(I did that).  It seems like it was, but Jon pointed out that it may still be wrong if that 32bit int is supposed to be in a defined byte order.  It was broken for me on Mac OS X at least with some IPv6 packets I had that used the loopback interface.

Jon did also point out that it probably shouldn't have been fixed in the v6 branch which made sense to me after I had already committed it. :)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the bro-dev mailing list