Bug #2478
open
PCAP logging does not include 802.1q header when using af-packet
Added by Paul Bakoyiannis over 6 years ago.
Updated over 1 year ago.
Description
PCAP files created while using af-packet v2/3 on tagged traffic do not include the vlan header. This is because the header is removed by the kernel and passed to us in an auxiliary data structure.
- Target version set to TBD
Similar to the AF_PACKET IPS mode we could forge the header back into the packet before it's written to disk.
- Related to Bug #1780: VLAN tags not forwarded in afpacket inline mode added
- Related to Bug #2934: VLAN tags stripped when saving pcap log added
- Status changed from New to Feedback
Paul, are you planning to submit a PR for this?
- Assignee changed from Paul Bakoyiannis to OISF Dev
Also available in: Atom
PDF