in reply to Re^19: p0fq.pl and pack
in thread p0fq.pl and pack?

ah, you rock!
$c->tag('p0f_query.src_ad', ByteOrder => 'BigEndian'); $c->tag('p0f_query.dst_ad', ByteOrder => 'BigEndian');
works for my PC.

I just commented ByteOrder, the native system endaness is used as you mentioned. but I have to specify Alignment, strange.

It still does not work for OS X, I guess I need to adjust some other parameters.