From: Eric Leblond <eric@regit.org>
Date: Wed, 9 Mar 2016 13:10:26 +0000 (+0100)
Subject: af-packet: handle raw link
X-Git-Tag: suricata-3.0.1RC1~42
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=11eb1d7c1d2b77d0706d7fd1632d9deeb7937a04;p=thirdparty%2Fsuricata.git

af-packet: handle raw link

If no link layer header is reported then it is a raw header.
---

diff --git a/src/source-af-packet.c b/src/source-af-packet.c
index 212e118424..f5b0ea399b 100644
--- a/src/source-af-packet.c
+++ b/src/source-af-packet.c
@@ -1307,6 +1307,7 @@ static int AFPGetDevLinktype(int fd, const char *ifname)
         case ARPHRD_LOOPBACK:
             return LINKTYPE_ETHERNET;
         case ARPHRD_PPP:
+        case ARPHRD_NONE:
             return LINKTYPE_RAW;
         default:
             return ifr.ifr_hwaddr.sa_family;