Package: tcpflow
Version: 1.5.2+repack1-1
Tags: patch

$ tcpflow -v -r x.pcap
reportfilename: ./report.xml
tcpflow: TCPFLOW version 1.5.1
tcpflow: looking for handler for datalink type 1 for interface x.pcap
tcpflow: warning: received ethernet frame with unknown type 0x88a8
tcpflow: warning: received ethernet frame with unknown type 0x88a8
tcpflow: warning: received ethernet frame with unknown type 0x88a8
tcpflow: warning: received ethernet frame with unknown type 0x88a8
[...]

Please add support for VLAN tags 0x9100 and 0x88a8. Patch attached.

Thank you! -- Martin
--- tcpflow-1.5.2+repack1.orig/src/datalink.cpp
+++ tcpflow-1.5.2+repack1/src/datalink.cpp
@@ -97,7 +97,9 @@ void dl_ethernet(u_char *user, const str
     }
 
     /* Handle basic VLAN packets */
-    while (ntohs(*ether_type) == ETHERTYPE_VLAN) {
+    while (ntohs(*ether_type) == ETHERTYPE_VLAN ||
+    		ntohs(*ether_type) == ETH_P_QINQ1 ||
+		ntohs(*ether_type) == ETH_P_8021AD) {
 	//vlan = ntohs(*(u_short *)(p+sizeof(struct ether_header)));
 	ether_type += 2;			/* skip past VLAN header (note it skips by 2s) */
 	ether_data += 4;			/* skip past VLAN header */

Reply via email to