Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backports/70x/v2 #10845

Closed
wants to merge 3 commits into from
Closed

Conversation

victorjulien
Copy link
Member

SV_BRANCH=OISF/suricata-verify#1766

Datalink/defrag backports for 7

v4 was doing redundant recursion level setup.

v6 was missing PKT_REBUILT_FRAGMENT flag.

(cherry picked from commit af97316)
Eve's packet_info.linktype should correctly indicated what the `packet`
field contains. Until now it was using DLT_RAW even if Ethernet or other
L2+ headers were present.

This commit records the datalink of the packet creating the first
fragment, which can include the L2+ header data.

Bug: OISF#6887.
(cherry picked from commit 49c67b2)
This is just another variant of DLT_RAW.

Ticket: OISF#6943.
(cherry picked from commit 7632236)
@suricata-qa
Copy link

Information: QA ran without warnings.

Pipeline 20070

@victorjulien
Copy link
Member Author

Merged in #10861, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
3 participants