Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ARP: add support for IEEE802 hardware type

Browse source
This commit is contained in:
Tim Wojtulewicz 2023-04-19 13:04:55 -07:00 • committed by Tim Wojtulewicz
parent ff6ebb9257
commit 31afe082ac
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/packet_analysis/protocol/arp/ARP.cc
View file

@ -79,6 +79,11 @@ ARPAnalyzer::ARPAnalyzer() : zeek::packet_analysis::Analyzer("ARP") { }
#define ARPOP_INVREPLY ARPOP_InREPLY #define ARPOP_INVREPLY ARPOP_InREPLY
#endif #endif
// Windows doesn't define this value.
#ifndef ARPHRD_IEEE802
#define ARPHRD_IEEE802 6
#endif
bool ARPAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* packet) bool ARPAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* packet)
{ {
packet->l3_proto = L3_ARP; packet->l3_proto = L3_ARP;
@ -110,6 +115,7 @@ bool ARPAnalyzer::AnalyzePacket(size_t len, const uint8_t* data, Packet* packet)
switch ( ntohs(ah->ar_hrd) ) switch ( ntohs(ah->ar_hrd) )
{ {
case ARPHRD_ETHER: case ARPHRD_ETHER:
case ARPHRD_IEEE802:
if ( ah->ar_hln != 6 ) if ( ah->ar_hln != 6 )
{ {
// don't know how to handle the opcode // don't know how to handle the opcode