From 96bb6ed0345964c3c760f7470d9a71f663149559 Mon Sep 17 00:00:00 2001 From: Cole Dishington Date: Wed, 24 May 2023 12:39:33 +1200 Subject: [PATCH] decode-ipv6: Set IPv6 proto incase of ext header parsing error Set the IPv6 packet proto before parsing the ext headers, similar to decode-ipv4, incase of an ext header parsing error. Otherwise rule decode-events are not triggered for packets encapsulated in IPv6. Bug: #6086. (cherry picked from commit 531d99f4cf3f7929ef5e972641d2f347c966b979) --- src/decode-ipv6.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/decode-ipv6.c b/src/decode-ipv6.c index fe27e471fc..bceb28ea07 100644 --- a/src/decode-ipv6.c +++ b/src/decode-ipv6.c @@ -596,6 +596,7 @@ int DecodeIPV6(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, const uint8_t * CLEAR_IPV6_PACKET(p); return TM_ECODE_FAILED; } + p->proto = IPV6_GET_NH(p); #ifdef DEBUG if (SCLogDebugEnabled()) { /* only convert the addresses if debug is really enabled */ -- 2.47.2