Actions
Bug #6440
closedTLS logging and maybe more not working on tagged traffic
Description
TLS logging does not work when traffic has a vlan-tag. There are no events of type TLS in eve.json when processing tagged traffic. The problem occurs at least in af_packet mode and can also be tested with "suricata -r test.pcap": once with vlan-tags in the pcap and once with the vlan-tags removed (editcap -L -C 12:4).
Updated by Victor Julien about 1 year ago
Can you share a pcap to show the issue?
Updated by Firstnamealias Lastnamealias about 1 year ago
Not a bug, sorry for your time. The "use-for-tracking: false" was needed here but did not seem to do anything, but I must have been mistaken.
Updated by Philippe Antoine about 1 year ago
- Status changed from New to Rejected
So closing if it was not a bug :-)
Actions