Project

General

Profile

Actions
Copy link

Feature #7146

open

decode: Create a decode event for unknown IP types

Added by Philippe Antoine 6 months ago. Updated about 2 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Unknown IP types are not counted neither evented.

switch (p->proto) has no default case in DecodeIPV4

Similar for IPv6.

Related issues 1 (1 open — 0 closed)

Copied from Suricata - Feature #7129: decode: Create a decode event for unknown ethertypesIn ReviewJeff LucovskyActions
Actions
Copy link
 #1

Updated by Philippe Antoine 6 months ago

  • Copied from Feature #7129: decode: Create a decode event for unknown ethertypes added
Actions
Copy link
 #2

Updated by Victor Julien 6 months ago

  • Subject changed from decode: Create a decode event for unknown iptypes to decode: Create a decode event for unknown IP types
  • Description updated (diff)
Actions
Copy link
 #3

Updated by Jeff Lucovsky about 2 months ago

  • Status changed from New to In Progress

Currently, ipv6 raises an event when the "next header" is unknown.

Actions
Copy link

Also available in: Atom PDF