Project

General

Profile

Actions

Bug #7855

closed

anomaly/ether_type: always logged as big endian

Added by Andy Awad 3 months ago. Updated 11 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
low
Difficulty:
low
Label:
Beginner, Protocol

Description

I believe the eth_type is logged as little-endian while the value is big-endian.
Maybe it can be handled in line 764 in output-json.c with the SCNtohs func call.
Also, it may make more sense to log the ether type in HEX instead of decimal.

Thanks,
Andy


Subtasks 1 (0 open1 closed)

Bug #8007: anomaly/ether_type: always logged as big endian (8.0.x backport)ClosedJeff LucovskyActions
Actions #1

Updated by Jeff Lucovsky about 1 month ago

  • Label Needs backport to 8.0 added
Actions #2

Updated by Jeff Lucovsky about 1 month ago

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Jeff Lucovsky
Actions #3

Updated by Jeff Lucovsky 21 days ago

  • Status changed from In Review to Closed
Actions #4

Updated by Victor Julien 21 days ago

  • Subject changed from Ether_type is printed as decimal instead of HEX and it should be handled as BigEndian to eve: ether_type is printed as decimal instead of HEX and it should be handled as BigEndian
Actions #5

Updated by Victor Julien 21 days ago

  • Status changed from Closed to Resolved
  • Target version changed from TBD to 9.0.0-beta1
Actions #6

Updated by OISF Ticketbot 21 days ago

  • Subtask #8007 added
Actions #7

Updated by OISF Ticketbot 21 days ago

  • Label deleted (Needs backport to 8.0)
Actions #8

Updated by Philippe Antoine 11 days ago

  • Status changed from Resolved to Closed
Actions #9

Updated by Shivani Bhardwaj 11 days ago

  • Subject changed from eve: ether_type is printed as decimal instead of HEX and it should be handled as BigEndian to anomaly/ether_type: always logged as big endian
Actions

Also available in: Atom PDF