Project

General

Profile

Actions
Copy link

Bug #7528

open

decode: remove duplicate counters tracking unknown ethertype values

Added by Jeff Lucovsky 25 days ago. Updated 24 days ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Issue 7129 introduced a counter to track events raise for unknown ethertypes. This results in 2 values tracking unknown ethertypes as this example from stats.log shows:

decoder.unknown_ethertype                                    | Total                     | 281
decoder.event.ethernet.unknown_ethertype                     | Total                     | 281

Remove the legacy counter -- decoder.unknown_ethertype -- and keep the event-based counter.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Feature #7129: decode: Create a decode event for unknown ethertypesClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Jeff Lucovsky 25 days ago

  • Related to Feature #7129: decode: Create a decode event for unknown ethertypes added
Actions
Copy link
 #2

Updated by Jeff Lucovsky 24 days ago

  • Subject changed from Remov to decode: remove duplicate counters tracking unknown ethertype values
Actions
Copy link

Also available in: Atom PDF