From 8ba0412ece0d92c3dc7b05813410a98ca19a4e21 Mon Sep 17 00:00:00 2001
From: James Lu <GLolol@overdrivenetworks.com>
Date: Thu, 14 Apr 2016 17:31:51 -0700
Subject: [PATCH] nefarious: set realhost = displayed host

---
 protocols/nefarious.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/protocols/nefarious.py b/protocols/nefarious.py
index 69a5705..4d46a3f 100644
--- a/protocols/nefarious.py
+++ b/protocols/nefarious.py
@@ -349,7 +349,7 @@ class P10Protocol(Protocol):
             ts, ident, host = args[2:5]
 
             # XXX: Is realhost ever sent?
-            realhost = None
+            realhost = host
 
             # Thanks to Jobe @ evilnet for the code on what to do here. :) -GL
             ip = args[-3]