]> git.ipfire.org Git - thirdparty/suricata.git/commit
defrag: fix wrong datalink being logged
authorVictor Julien <vjulien@oisf.net>
Sat, 23 Mar 2024 19:17:54 +0000 (20:17 +0100)
committerVictor Julien <victor@inliniac.net>
Sat, 13 Apr 2024 06:50:17 +0000 (08:50 +0200)
commit49c67b2bb1baa84b7105bca82afe6909be890855
treeace771e03d4cd2ab8956db26bc55c66f16f6eca1
parent72146b969c06fb95399673bf61b0f97ac4d2bae0
defrag: fix wrong datalink being logged

Eve's packet_info.linktype should correctly indicated what the `packet`
field contains. Until now it was using DLT_RAW even if Ethernet or other
L2+ headers were present.

This commit records the datalink of the packet creating the first
fragment, which can include the L2+ header data.

Bug: #6887.
src/decode.c
src/defrag.c
src/defrag.h