Changeset 244

Timestamp:

Aug 21, 2009, 9:55:05 PM (15 years ago)

Author:

katerina

Message:

Fix for ticket #164 (report path/user for udp ports).

Location:

trunk

Files:

• docs/Changelog (modified) (1 diff)
• src/sh_port2proc.c (modified) (1 diff)

trunk/docs/Changelog

@@ +1 @@
+2.5.9:
+        * fixed a bug that prevented reporting of user/executable path
+          for open UDP ports (issue reported by N. Rath)
+
 2.5.8a:
         * fixed a bug in sh_files.c that would prevent samhain from

trunk/src/sh_port2proc.c

@@ -347 +347 @@
               haddr.s_addr = (unsigned long)iface;
 
-              if (haddr.s_addr == saddr->s_addr && port == sport)
+              if ((proto == IPPROTO_UDP || haddr.s_addr == saddr->s_addr) && port == sport)
                 {
                   struct sock_store * new = socklist;