Bug #3076: Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #3076

closed

Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false

Added by Max Fillinger over 5 years ago. Updated over 5 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Max Fillinger

Target version:

5.0rc1

Affected Versions:

4.1.2, 4.1.3, 4.1.4, 5.0beta1

Effort:

Difficulty:

Label:

Description

When vlan.use-for-tracking is set to false, suricata sometimes doesn't store the vlan, e.g., when the vlan is stripped from the packet and supplied in a tpacket header. Even if one doesn't want to use the vlan for tracking, one might still want to have this information. Also, the current behavior is inconsistent since it sometimes does store the vlan.