[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 0.5.4 release candidate 1



On Thu, 2003-07-03 at 14:33, Gianni Tedesco wrote:
>  $ time firecat large.elog -f log -q "tcp.dport=3128 ip.ttl>64" | wc -l

Brown papaer bag time. You will need the following patch to make this
work correctly. Less than and greater than "< and >" are the wrong way
round in the parser :P

diff -u -r1.4 q_filter.c
--- firestorm/src/q_filter.c      29 Jun 2003 20:48:02 -0000      1.4
+++ firestorm/src/q_filter.c      3 Jul 2003 13:26:21 -0000
@@ -492,8 +492,8 @@
        }ops[]={
                {"==", QF_OP_EQ},
                {"=",  QF_OP_EQ},
-               {"<",  QF_OP_GT},
-               {">",  QF_OP_LT},
+               {">",  QF_OP_GT},
+               {"<",  QF_OP_LT},
                {">=", QF_OP_GE},
                {"<=", QF_OP_LE},
        };


-- 
// Gianni Tedesco (gianni at scaramanga dot co dot uk)
lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import
8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D

Attachment: signature.asc
Description: This is a digitally signed message part