Project

General

Profile

Actions
Copy link

Bug #400

closed

PF_RING crash on bonded interface

Added by Victor Julien over 12 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Eric Leblond
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

#0  DecodeEthernet (tv=0xbfa89c0, dtv=0xda8fe48, p=0x8f27070, pkt=0x1a00ffff <Address 0x1a00ffff out of bounds>, len=64, pq=0xd533dd0) at decode-ethernet.c:56
#1  0x0805ded8 in DecodePfring (tv=0xbfa89c0, p=0x8f27070, data=0xda8fe48, pq=0xd533dd0, postpq=0x0) at source-pfring.c:482

"They are VLAN tagged so they have an extra four bytes."

The way to find out from pfring if vlan tags are used seems to be through the struct pkt_parsing_info, which has field: u_int16_t vlan_id; /* VLAN Id or NO_VLAN */

Actions
Copy link

Also available in: Atom PDF