Project

General

Profile

Actions

Bug #2478

open

PCAP logging does not include 802.1q header when using af-packet

Added by Paul Bakoyiannis over 4 years ago. Updated over 2 years ago.

Status:
Feedback
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Protocol

Description

PCAP files created while using af-packet v2/3 on tagged traffic do not include the vlan header. This is because the header is removed by the kernel and passed to us in an auxiliary data structure.


Related issues 2 (1 open1 closed)

Related to Bug #1780: VLAN tags not forwarded in afpacket inline modeClosedEric Leblond05/06/2016Actions
Related to Bug #2934: VLAN tags stripped when saving pcap logNewOISF DevActions
Actions #1

Updated by Andreas Herz over 4 years ago

  • Target version set to TBD
Actions #2

Updated by Victor Julien over 3 years ago

Similar to the AF_PACKET IPS mode we could forge the header back into the packet before it's written to disk.

Actions #3

Updated by Andreas Herz about 3 years ago

  • Related to Bug #1780: VLAN tags not forwarded in afpacket inline mode added
Actions #4

Updated by Andreas Herz about 3 years ago

  • Related to Bug #2934: VLAN tags stripped when saving pcap log added
Actions #5

Updated by Victor Julien about 3 years ago

  • Status changed from New to Feedback

Paul, are you planning to submit a PR for this?

Actions #6

Updated by Victor Julien over 2 years ago

  • Label Protocol added
Actions

Also available in: Atom PDF