Project

General

Profile

Actions
Copy link

Bug #6440

closed

TLS logging and maybe more not working on tagged traffic

Added by Firstnamealias Lastnamealias about 1 year ago. Updated about 1 year ago.

Status:
Rejected
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Affected Versions:
6.0.13, 7.0.0, 6.0.14, 7.0.1, 6.0.15, 7.0.2
Effort:
Difficulty:
Label:

Description

TLS logging does not work when traffic has a vlan-tag. There are no events of type TLS in eve.json when processing tagged traffic. The problem occurs at least in af_packet mode and can also be tested with "suricata -r test.pcap": once with vlan-tags in the pcap and once with the vlan-tags removed (editcap -L -C 12:4).

Actions
Copy link

Also available in: Atom PDF