From: Russ Combs <rucombs@cisco.com>
Date: Wed, 12 Nov 2014 12:33:07 +0000 (-0500)
Subject: fixed byte_test endian
X-Git-Tag: 3.0.0-233~1233
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=68c2bc945d273d19355cf16b27778749eb30cd1a;p=thirdparty%2Fsnort3.git

fixed byte_test endian
---

diff --git a/ChangeLog b/ChangeLog
index e7db35fa2..f565228a3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -19,6 +19,7 @@
 -- fixed whitelist / blacklist enforcement
 -- josh fixed a decoding issue affecting fragged packets
 -- fixed byte_test config of compare value
+-- fixed byte_test endian
 
 127
 -- REG_TEST out logging tcp options for rebuilt packets to match snort bug
diff --git a/src/ips_options/ips_byte_test.cc b/src/ips_options/ips_byte_test.cc
index a4f87fc8e..ed3b22921 100644
--- a/src/ips_options/ips_byte_test.cc
+++ b/src/ips_options/ips_byte_test.cc
@@ -577,10 +577,10 @@ bool ByteTestModule::set(const char*, Value& v, SnortConfig*)
         data.relative_flag = 1;
 
     else if ( v.is("big") )
-        data.endianess |= ENDIAN_LITTLE;
+        data.endianess |= ENDIAN_BIG;
 
     else if ( v.is("little") )
-        data.endianess |= ENDIAN_BIG;
+        data.endianess |= ENDIAN_LITTLE;
 
     else if ( v.is("dce") )
         data.endianess |= ENDIAN_FUNC;