Project

General

Profile

Actions
Copy link

Bug #6440

closed
FL OD

TLS logging and maybe more not working on tagged traffic

Bug #6440: TLS logging and maybe more not working on tagged traffic

Added by Firstnamealias Lastnamealias over 2 years ago. Updated over 2 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Affected Versions:
6.0.13, 7.0.0, 6.0.14, 7.0.1, 6.0.15, 7.0.2
Effort:
Difficulty:
Label:

Description

TLS logging does not work when traffic has a vlan-tag. There are no events of type TLS in eve.json when processing tagged traffic. The problem occurs at least in af_packet mode and can also be tested with "suricata -r test.pcap": once with vlan-tags in the pcap and once with the vlan-tags removed (editcap -L -C 12:4).

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #1

Can you share a pcap to show the issue?

FL Updated by Firstnamealias Lastnamealias over 2 years ago Actions
Copy link
 #2

Not a bug, sorry for your time. The "use-for-tracking: false" was needed here but did not seem to do anything, but I must have been mistaken.

PA Updated by Philippe Antoine over 2 years ago Actions
Copy link
 #3

  • Status changed from New to Rejected

So closing if it was not a bug :-)

Actions
Copy link

Also available in: PDF Atom