diff --git a/volatility/plugins/overlays/windows/tcpip_vtypes.py b/volatility/plugins/overlays/windows/tcpip_vtypes.py index 794730b4..a9c03bbe 100644 --- a/volatility/plugins/overlays/windows/tcpip_vtypes.py +++ b/volatility/plugins/overlays/windows/tcpip_vtypes.py @@ -12,7 +12,7 @@ tcpip_vtypes = { '_ADDRESS_OBJECT' : [ 0x68, { 'Next' : [ 0x0, ['pointer', ['_ADDRESS_OBJECT']]], 'LocalIpAddress' : [ 0x2c, ['IpAddress']], - 'LocalPort' : [ 0x30, ['unsigned short']], + 'LocalPort' : [ 0x30, ['unsigned be short']], 'Protocol' : [ 0x32, ['unsigned short']], 'Pid' : [ 0x148, ['unsigned long']], 'CreateTime' : [ 0x158, ['WinTimeStamp', {}]],