Different ports reported in CIS and exported HTM file [NBZ]

TOPIC TITLE
Different reports in CIS and exported HTM file

The bug/issue

  1. What you did: Used Export option in Firewall Events / More / File / Export
  2. What actually happened or you actually saw: Difference in port numbers as seen in attached jpg
  3. What you expected to happen or see: Same port numbers
  4. How you tried to fix it & what happened: Nothing
  5. If its an application compatibility problem have you tried these fixes: Yes
  6. Details (exact version) of any application involved with download link: No
  7. Whether you can make the problem happen again, and if so precise steps to make it happen: No
  8. Any other information (eg your guess regarding the cause, with reasons): No

Files appended

  1. Screenshots illustrating the bug: Appended
  2. Screenshots of related CIS event logs or the Defense+ Active Processes List: No
  3. A CIS config. report or file: No
  4. Crash or freeze dump file: Not applicable

Your set-up

  1. CIS version, AV database version & configuration used: 5.0.163652.1142, Proactive config
  2. a) Have you updated (without uninstall) from CIS 3 or 4 b) if so have you tried reinstalling?: No, No
  3. a) Have U imported a config from a previous version of CIS, b) if so have U tried a preset config?: No, No
  4. Other major changes to the default config (eg ticked ‘block all unknown requests’, other egs here.): No
  5. Defense+ and Sandbox OR Firewall security level: Defenseplus=Safe, Sandbox=enabled
  6. OS version, service pack, bits, UAC setting, & account type: Windows 7 Ultimate, 32 bit, UAC enabled, Admin account.
  7. Other security and utility software installed: None
  8. Virtual machine used: None

[attachment deleted by admin]

Welcome to the forum maremo16 :slight_smile:

Thanks for your Bug report.

Tested and confirmed the bug.

Moving to Verified.

Thank you

Dennis

Hi Dennis2,

So, which are correct port numbers on reports? Ones generated in CIS or HTM generated port numbers?

Thanks.

The ones in CIS something appears to be happening some extra numbers are added, or complete changing of the number when you export to HTML

Dennis

Hi Dennis!

Not exactly… When exporting to HTML is a kind of “reversal” of bytes, defining the port.

For example:
port in the Log Viewer = 55177 ($D789)
port in the exported HTML = 35287 ($89D7)

Source: Comodo Firewall Pro / Comodo Internet Security (4) - [130] :: Программы :: Компьютерный форум Ru.Board

Ну и напоследок: Найден очередной баг. При экспорте журнала корежатся порты. Если более конкретно, то "переворачиваются" байты, например, в журнале порт 80 ($0050),а в экспортированном html - 20480 ($5000).

Bug still present in 5.3.174622.1216

Log Viewer => exported HTML (Circular shift?? )
1 => 256 ($0001 => $0100)
80 => 20480 ($0050 => $5000)
12401 => 28976 ($3071 => $7130)