9_class_network_byteswap.ql

import cpp

class NetworkByteSwap extends Expr {
  NetworkByteSwap () {
    exists(MacroInvocation mi |
      mi.getMacroName() in ["ntohs", "ntohl", "ntohll"] and mi.getExpr() = this
    )
  } 
}

from NetworkByteSwap n
select n, "Network byte swap"