From 86676cf4e87bbfa99cf4165af39ba71d7e8f9481 Mon Sep 17 00:00:00 2001
From: Gustavo Moreira <gmoreira@gmail.com>
Date: Tue, 14 Dec 2021 13:20:31 +1100
Subject: [PATCH] Changing BPF_PROG_TYPE_UNSPEC constant in favor of a literal
 0 and a comment.

---
 volatility3/framework/plugins/linux/sockstat.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/volatility3/framework/plugins/linux/sockstat.py b/volatility3/framework/plugins/linux/sockstat.py
index eab8993ba..943c497b1 100644
--- a/volatility3/framework/plugins/linux/sockstat.py
+++ b/volatility3/framework/plugins/linux/sockstat.py
@@ -183,8 +183,8 @@ class SockHandlers(interfaces.configuration.VersionableInterface):
         if not bpfprog:
             return
 
-        BPF_PROG_TYPE_UNSPEC = 0
-        if bpfprog.type > BPF_PROG_TYPE_UNSPEC:
+        # BPF_PROG_TYPE_UNSPEC = 0
+        if bpfprog.type > 0:
             extended["bpf_filter_type"] = "eBPF"
             bpfprog_aux = bpfprog.aux
             if bpfprog_aux: