Shawn Webb lattera

## bitdump.sh
#!/usr/bin/env sh

# bitdump.sh
#
# captures Bitcoin network traffic

SELF=`basename $0`

if [[ $1 = "" ]]; then
  DEFAULT="en1"

## getaddrinfo.c
/*
 * There is inconsistent behaviour regarding the way various operating
 * systems use IPV6_V6ONLY by default and interactions with bind() to bind a
 * wildcard socket (as in all available addresses) on an AF_INET6 (IPv6)
 * socket.
 *
 * getaddrinfo() returns two results, the first one being AF_INET and the
 * second being AF_INET6 (Unless you are on an OS that prefers IPv6, I'm
 * looking at you OI). We create a socket, bind, and listen on AF_INET first.
 * At that point we try to create a socket, bind and then listen on AF_INET6.

## SnortRulesParse.py
go to https://github.com/lattera/porkroll for the latest version.
	#!/usr/bin/env sh

	# bitdump.sh
	#
	# captures Bitcoin network traffic

	SELF=`basename $0`

	if [[ $1 = "" ]]; then
	DEFAULT="en1"
	/*
	* There is inconsistent behaviour regarding the way various operating
	* systems use IPV6_V6ONLY by default and interactions with bind() to bind a
	* wildcard socket (as in all available addresses) on an AF_INET6 (IPv6)
	* socket.
	*
	* getaddrinfo() returns two results, the first one being AF_INET and the
	* second being AF_INET6 (Unless you are on an OS that prefers IPv6, I'm
	* looking at you OI). We create a socket, bind, and listen on AF_INET first.
	* At that point we try to create a socket, bind and then listen on AF_INET6.