]> git.ipfire.org Git - people/ms/suricata.git/commitdiff
Add decoder events to ethernet and sll decoding.
authorVictor Julien <victor@inliniac.net>
Tue, 21 Jul 2009 11:18:29 +0000 (13:18 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 28 Jul 2009 21:25:22 +0000 (23:25 +0200)
src/decode-ethernet.c
src/decode-events.h
src/decode-sll.c

index c7ad74b9bcc9c6a0be0432cd78483166657a613b..8d0bd22c571af928cbda3845fdb3c439529ad782 100644 (file)
@@ -2,11 +2,14 @@
 
 #include "decode.h"
 #include "decode-ethernet.h"
+#include "decode-events.h"
 
 void DecodeEthernet(ThreadVars *t, Packet *p, u_int8_t *pkt, u_int16_t len, PacketQueue *pq)
 {
-    if (len < ETHERNET_HEADER_LEN)
+    if (len < ETHERNET_HEADER_LEN) {
+        DECODER_SET_EVENT(p,ETHERNET_PKT_TOO_SMALL);
         return;
+    }
 
     EthernetHdr *ethh = (EthernetHdr *)pkt;
     if (ethh == NULL)
index 4e400b022e5f80efd0286293881e464762ecbb10..8ece584ddac7d5e851d73c149360d1e700ab268b 100644 (file)
@@ -35,6 +35,11 @@ enum {
     UDP_HLEN_TOO_SMALL,
     UDP_HLEN_INVALID,
 
+    /* SLL EVENTS */
+    SLL_PKT_TOO_SMALL,
+
+    /* ETHERNET EVENTS */
+    ETHERNET_PKT_TOO_SMALL,
 };
 
 #endif /* __DECODE_EVENTS_H__ */
index 6b02211e59a91289a30e33c200346928b7b55858..b92c4e2c3d3ec40be955dbccc0c2cd2596280479 100644 (file)
@@ -2,11 +2,14 @@
 
 #include "decode.h"
 #include "decode-sll.h"
+#include "decode-events.h"
 
 void DecodeSll(ThreadVars *t, Packet *p, u_int8_t *pkt, u_int16_t len, PacketQueue *pq)
 {
-    if (len < SLL_HEADER_LEN)
+    if (len < SLL_HEADER_LEN) {
+        DECODER_SET_EVENT(p,SLL_PKT_TOO_SMALL);
         return;
+    }
 
     SllHdr *sllh = (SllHdr *)pkt;
     if (sllh == NULL)