tweak for raxml/raxml

[Russell Fulton]

I got a bunch of unasigned traffic turn up from a Dutch site. 

here is an example:

      <Far TransRefNum = "2194916">
         <Flow> <IP SrcIPAddr = "130.89.222.57" DstIPAddr = 
"130.216.172.0" Proto = "unas" Sport = "0" Dport = "0" /> </Flow>
         <FlowAttrs SrcTTL = "234" DstTTL = "0" SrcTOS = "0x0" DstTOS = 
"0x0" />
         <Metrics SrcCount = "1" DstCount = "0" SrcBytes = "78" 
DstBytes = "0" />
      </Far>

I think I would prefer it if ra put the actual number rather than 'unas'
in the protocol field just the same as it does with the port numbers.

adding -nn gives: Proto = "255"


Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand