Project

General

Profile

Actions

Feature #5956

open

Report traffic with missing VLAN tag

Added by Joerg Manasse over 1 year ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Sometimes outgoing packets have a VLAN tag, but the corresponding incoming packets do not.
There is a corresponding config parameter so that Suricata can deal with this.
However, it would be helpful to recognise such traffic (actively) in order to be able to react.

Report traffic with missing VLAN tag in the out or incoming packets of the same data stream.
Solution: Message in the log file or when called up directly with a corresponding (new) parameter.

Actions

Also available in: Atom PDF