From 2f05318a08a9f45a93bf6701c66bc82aeb8aa5fd Mon Sep 17 00:00:00 2001
From: Seth Hall <seth@corelight.com>
Date: Thu, 15 Oct 2020 10:44:32 -0400
Subject: [PATCH] Fixed a bug with ICMP checksum validation

---
 src/analyzer/protocol/icmp/ICMP.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/analyzer/protocol/icmp/ICMP.cc b/src/analyzer/protocol/icmp/ICMP.cc
index 49e8083574..782e062f32 100644
--- a/src/analyzer/protocol/icmp/ICMP.cc
+++ b/src/analyzer/protocol/icmp/ICMP.cc
@@ -51,7 +51,7 @@ void ICMP_Analyzer::DeliverPacket(int len, const u_char* data,
 
 	if ( ! zeek::detail::ignore_checksums && 
 	     ! zeek::id::find_val<TableVal>("ignore_checksums_nets")->Contains(ip->IPHeaderSrcAddr()) &&
-	     !caplen >= len )
+	     caplen >= len )
 		{
 		int chksum = 0;