Project

General

Profile

Actions
Copy link

Feature #7753

closed

vxlan: decoder drops packets with non-zero reserved fields

Added by Fupeng Zhao 5 months ago. Updated 10 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Fupeng Zhao
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:
C, Needs Suricata-Verify test, Protocol

Description

The current VXLAN decoder implementation follows RFC draft-mahalingam-dutt-dcops-vxlan-00 too strictly and does not ignore the Reserved fields on receipt, as required by RFC 7348 §5 . This causes valid VXLAN packets with non-zero Reserved bits to be dropped, leading to loss of response-side traffic in some environments.

Files

vxlan-non-zero-reserved-fields.pcap (1.95 KB) vxlan-non-zero-reserved-fields.pcap Fupeng Zhao, 06/12/2025 06:44 AM

Subtasks 1 (0 open — 1 closed)

Feature #7940: vxlan: decoder drops packets with non-zero reserved fields (8.0.x backport)ClosedFupeng ZhaoActions
Actions
Copy link

Also available in: Atom PDF