Project

General

Profile

Actions

Feature #2771

closed

MPLS over Vlan support

Added by Wesley van der Ree over 2 years ago. Updated 7 months ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
low
Difficulty:
Label:
Protocol

Description

I was looking at the code for decode-vlan.c and noticed that it wasn't capable of handling MPLS over vlan. We have seen this type of traffic by one of our customers an wish to monitor this.


Files

vlan_mpls.pcap (93 Bytes) vlan_mpls.pcap Wesley van der Ree, 01/14/2019 02:01 PM
Actions #1

Updated by Victor Julien over 1 year ago

  • Label Protocol added
Actions #2

Updated by Philippe Antoine 7 months ago

  • Status changed from New to Closed

It works with current version.
I get

jq '.' log/eve.json 
{
  "timestamp": "2019-01-14T14:08:24.156358+0100",
  "flow_id": 1633369784345286,
  "event_type": "flow",
  "vlan": [
    42
  ],
  "src_ip": "1.1.1.1",
  "dest_ip": "0.0.0.0",
  "proto": "ICMP",
  "icmp_type": 8,
  "icmp_code": 0,

A S-V test can be created out of this if needed

Actions

Also available in: Atom PDF