Added by Victor Julien about 12 years ago. Updated about 12 years ago.
Description
Invalid combination. We already do detect the reverse (icmpv4 on ipv6).
Files
| 2200092-001-nsa-public-tp-01.pcap (100 Bytes) 2200092-001-nsa-public-tp-01.pcap | Victor Julien, 02/08/2014 04:27 AM |
Attached an example of this from the NSA data set: https://www.itoc.usma.edu/research/dataset/
Addressed by:
commit fdca557e0162e02ee5b40949948685e3ca8ae5c0
Author: Victor Julien <victor@inliniac.net>
Date: Sat Feb 8 11:25:13 2014 +0100
ipv4 decoder: set 'invalid' event on icmpv6
ICMPv6 on IPv4 is invalid, so if we encounter this we set an event
and flag the packet as invalid.
Ticket #1105.