]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 25d0fba) | patch
af-packet: warn if defrag not suitable for mode
authorJason Ish <jason.ish@oisf.net>
Wed, 12 Mar 2025 18:34:31 +0000 (12:34 -0600)
committerVictor Julien <vjulien@oisf.net>
Tue, 18 Mar 2025 10:02:32 +0000 (11:02 +0100)
commit808502d5cac0681e17859ed1aef9be8f508c4b13
tree2f59cb7d40a286419f5b7ecd7650c04102321665tree
parent25d0fba91274e8d26e804f278c281a5c9f5309e9commit | diff
af-packet: warn if defrag not suitable for mode

AF_PACKET defrag should not be used for inline modes. Its possible that
a packet received could be larger than can be set when defrag is
enabled, so warn if disabled for inline use.

Likewise, warn if defrag is disabled for IDS use, or non-inline mode.

Ticket: #7458
src/runmode-af-packet.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git