decode/vlan: don't consider ARP 'unknown'

8 years ago · bc46d9a72f
parent a8b0825c18
commit bc46d9a72f
1 changed files with 2 additions and 0 deletions
--- a/src/decode-vlan.c
+++ b/src/decode-vlan.c
@ -124,6 +124,8 @@ int DecodeVLAN(ThreadVars *tv, DecodeThreadVars *dtv, Packet *p, uint8_t *pkt, u
            DecodeIEEE8021ah(tv, dtv, p, pkt + VLAN_HEADER_LEN,
                    len - VLAN_HEADER_LEN, pq);
            break;
+        case ETHERNET_TYPE_ARP:
+            break;
        default:
            SCLogDebug("unknown VLAN type: %" PRIx32 "", proto);
            ENGINE_SET_INVALID_EVENT(p, VLAN_UNKNOWN_TYPE);