On Thu, 2003-07-03 at 14:33, Gianni Tedesco wrote: > $ time firecat large.elog -f log -q "tcp.dport=3128 ip.ttl>64" | wc -l Brown papaer bag time. You will need the following patch to make this work correctly. Less than and greater than "< and >" are the wrong way round in the parser :P diff -u -r1.4 q_filter.c --- firestorm/src/q_filter.c 29 Jun 2003 20:48:02 -0000 1.4 +++ firestorm/src/q_filter.c 3 Jul 2003 13:26:21 -0000 @@ -492,8 +492,8 @@ }ops[]={ {"==", QF_OP_EQ}, {"=", QF_OP_EQ}, - {"<", QF_OP_GT}, - {">", QF_OP_LT}, + {">", QF_OP_GT}, + {"<", QF_OP_LT}, {">=", QF_OP_GE}, {"<=", QF_OP_LE}, }; -- // Gianni Tedesco (gianni at scaramanga dot co dot uk) lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import 8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
Attachment:
signature.asc
Description: This is a digitally signed message part