Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

The packet parser does not parse packets #251

Closed
Lukas955 opened this issue Jan 23, 2025 · 1 comment
Closed

The packet parser does not parse packets #251

Lukas955 opened this issue Jan 23, 2025 · 1 comment

Comments

@Lukas955
Copy link

It looks like that the packet parser is not able to parse packets if --with-pcap option is enabled during compilation and input modules like dpdk, dpdk-ring or nfb are later used as packet providers.

The issues seems to be here in "ifdef" section. If the PCAP option is enabled, the parser behaviour is significantly changed as it needs "opt->datalink" with information about the first layer of the packet as it can start with Ethernet, IP layer or something else. However, if the option is disabled, it assumes that the first layer is always Ethernet.

Inputs like dpdk, dpdk-ring or nfb don't fill the information about the first layer (see links) and always fill zero. This causes the packet parser not to recognize the first layer.

@SiskaPavel
Copy link
Contributor

Solved in #256

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants