From: Victor Julien <victor@inliniac.net>
Date: Wed, 20 Dec 2017 08:30:42 +0000 (+0100)
Subject: decode/vlan: don't consider ARP 'unknown'
X-Git-Tag: suricata-4.0.4~39
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=445f2f2bc5d13f0790353eed90cd5177676ce7c3;p=thirdparty%2Fsuricata.git

decode/vlan: don't consider ARP 'unknown'
---

diff --git a/src/decode-vlan.c b/src/decode-vlan.c
index 70096a416e..6db2aaaf16 100644
--- a/src/decode-vlan.c
+++ b/src/decode-vlan.c
@@ -124,6 +124,8 @@ int DecodeVLAN(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, uint8_t *pkt, u
             DecodeIEEE8021ah(tv, dtv, p, pkt + VLAN_HEADER_LEN,
                     len - VLAN_HEADER_LEN, pq);
             break;
+        case ETHERNET_TYPE_ARP:
+            break;
         default:
             SCLogDebug("unknown VLAN type: %" PRIx32 "", proto);
             ENGINE_SET_INVALID_EVENT(p, VLAN_UNKNOWN_TYPE);