[Bro-Dev] #641: Multiple nested VLAN tags don't work

Bro Tracker bro at tracker.bro-ids.org
Fri Oct 14 08:24:28 PDT 2011


#641: Multiple nested VLAN tags don't work
---------------------+------------------------
 Reporter:  seth     |      Owner:
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:
Component:  Bro      |    Version:  git/master
 Keywords:           |
---------------------+------------------------
 If traffic is seen with two vlan tags, Bro is currently failing.  The
 assumption in the code now is that if there is a vlan tag after the
 ethernet header there is a single vlan header and then IP is within that.
 We need to be checking the "type" field of the vlan tag to see what is
 contained within it and pass it back to the input again after stripping
 that header.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/641>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list