Re: [Snort-devel] Win32 and interface

From: Ian Macdonald <secsnortdev(at)dirk.demon.co.uk>
Date: Wed Oct 01 2003 - 10:39:17 EDT

I think I see the problem, in 2.0.0 print_interface would return a non unicode string. In 2.0.2 it is returning a unicode string. so

    if (!pv.readmode_flag)

            LogMessage("\nInitializing Network Interface %s\n",
                    PRINT_INTERFACE(pv.interface));

is printing

    Initializing Network Interface \

rather than the full string.

How do you use the memory window to look at a unicode string? ----- Original Message -----
From: "Chris Reid" <chris.reid@codecraftconsultants.com> To: "Ian Macdonald" <secsnortdev@dirk.demon.co.uk>; <snort-devel@lists.sourceforge.net>
Sent: Monday, September 29, 2003 8:37 PM Subject: Re: [Snort-devel] Win32 and interface

>
> One thing to note is that the Interface names returned are actually
Unicode
> (double-byte character) strings. The second (upper?) byte of each
character
> is zero/null for ASCII characters. Look at the value in the memory window
and
> that your database structure is built properly please let me know if you

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Wed Oct 1 10:45:49 2003