Project

General

Profile

Actions
Copy link

Bug #3076

closed

Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false

Added by Max Fillinger over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Max Fillinger
Target version:
5.0rc1
Affected Versions:
4.1.2, 4.1.3, 4.1.4, 5.0beta1
Effort:
Difficulty:
Label:

Description

When vlan.use-for-tracking is set to false, suricata sometimes doesn't store the vlan, e.g., when the vlan is stripped from the packet and supplied in a tpacket header. Even if one doesn't want to use the vlan for tracking, one might still want to have this information. Also, the current behavior is inconsistent since it sometimes does store the vlan.

Actions
Copy link

Also available in: Atom PDF