Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false
When vlan.use-for-tracking is set to false, suricata sometimes doesn't store the vlan, e.g., when the vlan is stripped from the packet and supplied in a tpacket header. Even if one doesn't want to use the vlan for tracking, one might still want to have this information. Also, the current behavior is inconsistent since it sometimes does store the vlan.
Updated by Andreas Herz almost 4 years ago
- Target version set to TBD
Updated by Victor Julien almost 4 years ago
- Status changed from Assigned to Closed
- Target version changed from TBD to 5.0rc1
- Affected Versions 4.1.3, 4.1.4, 5.0beta1 added