sanity check in bro
Paul Howell
grue at merit.edu
Thu Dec 17 08:43:06 PST 1998
Hi,
I'm sure I'm missing something easy here, but I need a set of
more experienced eyes to help me with this.
In Sessions.cc, NetSessions::NextPacket(), there is:
uint32 src_addr = uint32(ip->ip_src.s_addr);
uint32 dst_addr = uint32(ip->ip_dst.s_addr);
uint32 src_port, dst_port;
// grue - print src/dst asap
fprintf(stderr, "src %s dst %s\n", dotted_addr(src_addr),
dotted_addr(dst_addr));
I added the fprintf more as a temporary debug line to see
src/dst ip addresses.
When I compile this and run it, I see the same ip address for
source and destination. I would have expected to see different
src/dst addresses, thinking that NetSessions::NextPacket() is called
for every packet received.
So what am I missing?
Thanks.
< paul
More information about the Bro
mailing list