Project

General

Profile

Actions
Copy link

Bug #932

closed

wrong IP version - on stacked layers

Added by Peter Manev over 10 years ago. Updated over 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
2.0beta2
Affected Versions:
Effort:
Difficulty:
Label:

Description

Using Suricata 1.4.5 and beta.

In the attached pcap - IPv4v6VersionStacked.pcap - we actually have an IPv4 in IPv6 , IPv6 in IPv6

Suricata alerts with (decoder events) 

[**] [1:2200011:1] SURICATA IPv4 wrong IP version [**]

But actually the IP versions are correct.

Files

IPv4v6VersionStacked.pcap (194 Bytes) IPv4v6VersionStacked.pcap Peter Manev, 08/29/2013 02:50 AM
Actions
Copy link

Also available in: Atom PDF