## 13_pop_with_version.dpatch by Luciano Bello <luciano@linux.org.ar>
##
## DP: distinguish between pop versions

--- trunk~/decode.c	2007-08-11 18:43:41.000000000 -0300
+++ trunk/decode.c	2007-08-11 19:01:08.000000000 -0300
@@ -63,7 +63,8 @@
 	{ "http",	decode_http },
 	{ "ospf",	decode_ospf },
 	{ "poppass",	decode_poppass },
-	{ "pop",	decode_pop },
+	{ "pop2",	decode_pop },
+	{ "pop3",	decode_pop },
 	{ "nntp",	decode_nntp },
 	{ "smb",	decode_smb },
 	{ "imap",	decode_imap },
--- trunk~/dsniff.services	2007-08-11 18:43:41.000000000 -0300
+++ trunk/dsniff.services	2007-08-11 19:00:21.000000000 -0300
@@ -10,8 +10,8 @@
 ospf		89/ip
 http		98/tcp
 poppass		106/tcp
-pop		109/tcp
-pop		110/tcp
+pop2		109/tcp
+pop3		110/tcp
 portmap		111/tcp
 portmap		-111/tcp
 portmap		111/udp