in unified2.py: sport-itype and dport-icode should be four separate fields, not two

[NDietrich]

in EVENT_FIELDS and EVENT_IP6_FIELDS in unified2.py, you have the "sport-itype" and "dport-icode" fields. These should be four fields instead of two:
sport -> source Port
dport -> destination port

itype -> ICMP Type
icode -> ICMP code

[NDietrich]

Never mind, a closer look shows that this field is a dual-use field. my apologies.