[Ipaudit-devel] SearchIpauditData patch for last talker

[Chris G. <cm...@do...>]

Hey folks,

IIRC There used to be (atleast in my old SearchIpauditData.pl) a
functionality that would let you search for connections that didn't
have a response.

Anyway, it's not there currently.

I needed this b/c I have a machine trying to talk to a network that
it used to be on and was trying to just see those connections.

--- SearchIpauditData.orig      2004-05-20 12:11:38.000000000 -0400
+++ SearchIpauditData   2004-05-20 12:21:11.000000000 -0400
@@ -467,7 +467,10 @@
                        next if $data[11] ne $search{first_talker};
                }
  
-               if($search{last_talker} ne "any")  {
+               if($search{last_talker} eq "none") {
+                       next unless ($data[7]==0 || $data[8]==0);
+               }
+               elsif($search{last_talker} ne "any")  {
                        next if $data[12] ne $search{last_talker};
                }
  
@@ -765,6 +768,7 @@
 <option  VALUE="any"    $SELECTED{last_talker}{any}    > any
 <option  VALUE="local"  $SELECTED{last_talker}{local}  > local
 <option  VALUE="remote" $SELECTED{last_talker}{remote} > remote
+<option  VALUE="none"   $SELECTED{last_talker}{none}   > none
 </select>
 </td></tr>
 </table>

-- 
Chris Green <cm...@do...>
This is my signature. There are many like it but this one is mine.