Re-enable support for non Ethernet decoders so that Snort can listen on our pflog(4) interface again. Tested on amd64 and i386. Before the 64-bit time_t change, it was also tested on amd64 and i386 (by myself and Adam Jeanguenat) and on macppc.
22 lines
861 B
Plaintext
22 lines
861 B
Plaintext
$OpenBSD: patch-src_ppm_c,v 1.8 2013/08/21 02:28:45 lteo Exp $
|
|
--- src/ppm.c.orig Wed Jul 3 17:31:22 2013
|
|
+++ src/ppm.c Mon Aug 5 14:37:49 2013
|
|
@@ -509,7 +509,7 @@ void ppm_rule_log(ppm_cfg_t *ppm_cfg, uint64_t pktcnt,
|
|
int i;
|
|
|
|
if(!*timestamp)
|
|
- ts_print((struct timeval*)&p->pkth->ts, timestamp);
|
|
+ ts_print((struct sf_timeval32*)&p->pkth->ts, timestamp);
|
|
|
|
for (i=0; i< ppm_n_crules; i++)
|
|
{
|
|
@@ -588,7 +588,7 @@ void ppm_rule_log(ppm_cfg_t *ppm_cfg, uint64_t pktcnt,
|
|
LogMessage(PPM_FMT_SUS_PKT, pktcnt, src, p->sp, dst, p->dp);
|
|
|
|
if(!*timestamp)
|
|
- ts_print((struct timeval*)&p->pkth->ts, timestamp);
|
|
+ ts_print((struct sf_timeval32*)&p->pkth->ts, timestamp);
|
|
|
|
for (i=0; i< ppm_n_rules; i++)
|
|
{
|