Project

General

Profile

Actions

Bug #1104

closed

vlan tagged fragmentation

Added by Peter Manev about 10 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Related to ->
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/VLAN_Handling
When we have a vlan session/flow - we alert properly.If the vlan tagged data packet(that is supposed to alert) is fragmented Suricata does not alert - as of 2.0dev (rev 7726cec)

pcaps available privately.

Actions

Also available in: Atom PDF