Project

General

Profile

Actions
Copy link

Bug #1328

closed

No vlanid in pcap-log

Added by Andreas Moe over 9 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
OISF Dev
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

I have a suricata box with getting data from a SPAN. If i run tcpdump on this interface is see the VLAN-IDs that the packets are tagged with. But the data that suricata stores through alerts.pcap-log are not saved with vlanid. 1) Why is this? 2) Is this something we can change?

Actions
Copy link

Also available in: Atom PDF