Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Remove reporter warning for bad IP protocols

Browse source 
It turns out that this can be *very* spammy on networks where we're receiving
lots of these packets, and can fill up the reporter log very quickly. Weirds are
already reported in all of these cases anyways, so it doesn't make sense to log
a reporter warning too.
This commit is contained in:
Tim Wojtulewicz 2022-08-18 10:01:49 -07:00
parent 0f8e675a49
commit 40b1452905
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/packet_analysis/protocol/ip/IP.cc
View file

@ -310,8 +310,7 @@ int zeek::packet_analysis::IP::ParsePacket(int caplen, const u_char* const pkt,
else else
{ {
zeek::reporter->InternalWarning("Bad IP protocol version in IP::ParsePacket"); return -2;
return -1;
} }
if ( (uint32_t)caplen != inner->TotalLen() ) if ( (uint32_t)caplen != inner->TotalLen() )