From: Jeff Lucovsky <jlucovsky@oisf.net>
Date: Sun, 5 Oct 2025 13:33:14 +0000 (-0400)
Subject: doc/output: Highlight ethertype value change
X-Git-Tag: suricata-8.0.2~28
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F14107%2Fhead;p=thirdparty%2Fsuricata.git

doc/output: Highlight ethertype value change

Issue: 8007

Highlight the change to how ether_type values are displayed. Previously,
they were displayed in network order as a decimal value.

They are now displayed in host order as a decimal value.

(cherry picked from commit 16d124cfda2ce46bbba81beabfd4a6ea27daca43)
---

diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst
index 1e9d4ca3c1..630659e530 100644
--- a/doc/userguide/upgrade.rst
+++ b/doc/userguide/upgrade.rst
@@ -34,6 +34,15 @@ also check all the new features that have been added but are not covered by
 this guide. Those features are either not enabled by default or require
 dedicated new configuration.
 
+Upgrading to 8.0.2
+------------------
+
+Logging Changes
+~~~~~~~~~~~~~~~
+- Ethertype values (``ether.ether_type``) are now logged matching the network order value.
+  E.g., previously, ``ether_type`` values were logged in host order;  an ethertype value of ``0xfbb7``
+  (network order) was logged as `47099`` (``0xb7fb``). This ethertype value will be logged as ``64439``.
+
 Upgrading to 8.0.1
 ------------------