diff --git a/tools/tcpstates.py b/tools/tcpstates.py
index 5c04f45..ec5bb7b 100755
--- a/tools/tcpstates.py
+++ b/tools/tcpstates.py
@@ -182,6 +182,7 @@
 
     // dport is either used in a filter here, or later
     u16 dport = sk->__sk_common.skc_dport;
+    dport = ntohs(dport);
     FILTER_DPORT
 
     // calculate delta