Project

General

Profile

Actions

Task #7531

open

output: rename "ether_type" field

Added by Jeff Lucovsky 22 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

The changes for issue 7129 introduced a new output field named @ether_type@kiripolsky

In context, the ether_type field is a member of the ether object so the value is ether.ether_type

vjulien suggests that the value be @ether.type or ethernet.type (preferred).


Related issues 1 (0 open1 closed)

Follows Suricata - Feature #7129: decode: Create a decode event for unknown ethertypesClosedJeff LucovskyActions
Actions

Also available in: Atom PDF