]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
decode/vlan: don't consider ARP 'unknown'
authorVictor Julien <victor@inliniac.net>
Wed, 20 Dec 2017 08:30:42 +0000 (09:30 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 30 Jan 2018 09:32:17 +0000 (10:32 +0100)
src/decode-vlan.c

index 70096a416ed2b00e0a2ed23e044f588e001e74a0..6db2aaaf16a80e60ba3ffaa8a87bb9f6372979ae 100644 (file)
@@ -124,6 +124,8 @@ int DecodeVLAN(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, uint8_t *pkt, u
             DecodeIEEE8021ah(tv, dtv, p, pkt + VLAN_HEADER_LEN,
                     len - VLAN_HEADER_LEN, pq);
             break;
+        case ETHERNET_TYPE_ARP:
+            break;
         default:
             SCLogDebug("unknown VLAN type: %" PRIx32 "", proto);
             ENGINE_SET_INVALID_EVENT(p, VLAN_UNKNOWN_TYPE);