From 445f2f2bc5d13f0790353eed90cd5177676ce7c3 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 20 Dec 2017 09:30:42 +0100 Subject: [PATCH] decode/vlan: don't consider ARP 'unknown' --- src/decode-vlan.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/decode-vlan.c b/src/decode-vlan.c index 70096a416e..6db2aaaf16 100644 --- a/src/decode-vlan.c +++ b/src/decode-vlan.c @@ -124,6 +124,8 @@ int DecodeVLAN(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, uint8_t *pkt, u DecodeIEEE8021ah(tv, dtv, p, pkt + VLAN_HEADER_LEN, len - VLAN_HEADER_LEN, pq); break; + case ETHERNET_TYPE_ARP: + break; default: SCLogDebug("unknown VLAN type: %" PRIx32 "", proto); ENGINE_SET_INVALID_EVENT(p, VLAN_UNKNOWN_TYPE); -- 2.47.2