[Bro-Dev] #641: Multiple nested VLAN tags don't work
Bro Tracker
bro at tracker.bro-ids.org
Fri Oct 14 08:24:28 PDT 2011
#641: Multiple nested VLAN tags don't work
---------------------+------------------------
Reporter: seth | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone:
Component: Bro | Version: git/master
Keywords: |
---------------------+------------------------
If traffic is seen with two vlan tags, Bro is currently failing. The
assumption in the code now is that if there is a vlan tag after the
ethernet header there is a single vlan header and then IP is within that.
We need to be checking the "type" field of the vlan tag to see what is
contained within it and pass it back to the input again after stripping
that header.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/641>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list