From 3bbfc3865d74cfb725015813e52e4897aab8c59c Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Fri, 2 Jun 2023 15:26:14 -0400
Subject: [PATCH] use proper URL spacing

---
 salt/common/tools/sbin_jinja/so-import-pcap | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/common/tools/sbin_jinja/so-import-pcap b/salt/common/tools/sbin_jinja/so-import-pcap
index f0662dec2..684cc6ed0 100755
--- a/salt/common/tools/sbin_jinja/so-import-pcap
+++ b/salt/common/tools/sbin_jinja/so-import-pcap
@@ -205,7 +205,7 @@ for PCAP in $INPUT_FILES; do
       HASH_FILTERS="import.id:${HASH}"
       HASHES="${HASH}"
     else
-      HASH_FILTERS="$HASH_FILTERS OR import.id:${HASH}"
+      HASH_FILTERS="$HASH_FILTERS%20OR%20import.id:${HASH}"
       HASHES="${HASHES} ${HASH}"
     fi