use port number as better indicator of fake close

[skip ci]
This commit is contained in:
Lorenzo Manacorda
2016-10-05 13:35:22 +02:00
parent 10ca05aeb8
commit 4d948a5888

View File

@@ -167,7 +167,7 @@ func (r *Reporter) Report() (report.Report, error) {
r.addConnection(&rpt, tuple, "", fromNodeInfo, toNodeInfo)
case Close:
// ignore fake closes
if e.SourceAddress.String() != "0.0.0.0" && e.DestAddress.String() != "0.0.0.0" {
if e.SourcePort != 0 && e.DestPort != 0 {
r.removeConnection(&rpt, tuple, "", fromNodeInfo, toNodeInfo)
}
}