Web Interface - Fetch PCAP by Event String

What steps will reproduce the problem?
1.  Attempt to pull a PCAP based on a supported event string through the web 
interface.

What is the expected output? What do you see instead?
1.  Expect to receive a PCAP containing the packets related to the event.
2.  Receive a 0 byte file.

What version of the product are you using? On what operating system?
1.  0.6-341
2.  Ubuntu 11.10

Please provide any additional information below.
I believe the issue on line 43 of index.php:

$bpf        = sanitize("bpf");        if (empty($bpf))        $logline = "bpf";

Instead, it should be:

$bpf        = sanitize("bpf");        if (empty($bpf))        $bpf = "bpf";

Original issue reported on code.google.com by whalen.r...@gmail.com on 2 Feb 2012 at 5:10

ajrockefeller / openfpc

Web Interface - Fetch PCAP by Event String #28