Project

General

Profile

Actions
Copy link

Bug #7753

open

vxlan: decoder drops packets with non-zero reserved fields

Added by Fupeng Zhao 6 days ago. Updated 5 days ago.

Status:
In Review
Priority:
Normal
Assignee:
Fupeng Zhao
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:
C, Needs Suricata-Verify test, Protocol

Description

The current VXLAN decoder implementation follows RFC draft-mahalingam-dutt-dcops-vxlan-00 too strictly and does not ignore the Reserved fields on receipt, as required by RFC 7348 §5 . This causes valid VXLAN packets with non-zero Reserved bits to be dropped, leading to loss of response-side traffic in some environments.

Files

vxlan-non-zero-reserved-fields.pcap (1.95 KB) vxlan-non-zero-reserved-fields.pcap Fupeng Zhao, 06/12/2025 06:44 AM
Actions
Copy link

Also available in: Atom PDF