On some distros it was correct, others it failed. I think this was
due to a type in string.gsub, using %g instead of %c.
-10/06/2015-15:16:43.137833 codemonkey.net [**] /base64-hello-world.txt [**] ........... [**] 10.16.1.11:59733.0 -> 104.131.202.103:80.0
+10/06/2015-15:16:43.137833 codemonkey.net [**] /base64-hello-world.txt [**] curl/7.40.0 [**] 10.16.1.11:59733.0 -> 104.131.202.103:80.0
if http_ua == nil then
http_ua = "<useragent unknown>"
end
- http_ua = string.gsub(http_ua, "%g", ".")
+ http_ua = string.gsub(http_ua, "%c", ".")
ts = SCPacketTimeString()
ipver, srcip, dstip, proto, sp, dp = SCFlowTuple()