Project

General

Profile

Actions

Bug #3076

closed

Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false

Added by Max Fillinger over 5 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

When vlan.use-for-tracking is set to false, suricata sometimes doesn't store the vlan, e.g., when the vlan is stripped from the packet and supplied in a tpacket header. Even if one doesn't want to use the vlan for tracking, one might still want to have this information. Also, the current behavior is inconsistent since it sometimes does store the vlan.

Actions

Also available in: Atom PDF