Project

General

Profile

Actions
Copy link

Optimization #7528

open

decode: remove duplicate counters tracking unknown ethertype values

Added by Jeff Lucovsky 8 months ago. Updated 18 days ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Issue 7129 introduced a counter to track events raise for unknown ethertypes. This results in 2 values tracking unknown ethertypes as this example from stats.log shows:

decoder.unknown_ethertype                                    | Total                     | 281
decoder.event.ethernet.unknown_ethertype                     | Total                     | 281

Remove the legacy counter -- decoder.unknown_ethertype -- and keep the event-based counter.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Feature #7129: decode: Create a decode event for unknown ethertypesClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Jeff Lucovsky 8 months ago

  • Related to Feature #7129: decode: Create a decode event for unknown ethertypes added
Actions
Copy link
 #2

Updated by Jeff Lucovsky 8 months ago

  • Subject changed from Remov to decode: remove duplicate counters tracking unknown ethertype values
Actions
Copy link
 #3

Updated by Philippe Antoine 2 months ago

  • Affected Versions 8.0.0 added
Actions
Copy link
 #4

Updated by Philippe Antoine 18 days ago

  • Tracker changed from Bug to Optimization
  • Affected Versions deleted (8.0.0)
Actions
Copy link

Also available in: Atom PDF