Project

General

Profile

Actions
Copy link

Feature #7146

closed
PA JL

decode: Create a decode event for unknown IP types

Feature #7146: decode: Create a decode event for unknown IP types

Added by Philippe Antoine almost 2 years ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Unknown IP types are not counted neither evented.

switch (p->proto) has no default case in DecodeIPV4

Similar for IPv6.

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Feature #7129: decode: Create a decode event for unknown ethertypesClosedJeff LucovskyActions

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #1

  • Copied from Feature #7129: decode: Create a decode event for unknown ethertypes added

VJ Updated by Victor Julien almost 2 years ago Actions
Copy link
 #2

  • Subject changed from decode: Create a decode event for unknown iptypes to decode: Create a decode event for unknown IP types
  • Description updated (diff)

JL Updated by Jeff Lucovsky over 1 year ago Actions
Copy link
 #3

  • Status changed from New to In Progress

Currently, ipv6 raises an event when the "next header" is unknown.

JL Updated by Jeff Lucovsky 5 months ago Actions
Copy link
 #4

  • Status changed from In Progress to In Review

JL Updated by Jeff Lucovsky 2 months ago Actions
Copy link
 #5

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom