From 3752af6cd7a3cba0b95fbb357535e233bd164ab1 Mon Sep 17 00:00:00 2001
From: Gianni Tedesco <gtedesco@rapid7.com>
Date: Thu, 12 Mar 2026 12:25:12 +0000
Subject: [PATCH] decode/erspan: move header struct to source file

ErspanHdr is not used outside of the decode-erspan.c compilation
unit, so define it there instead of in the header.

Ticket: #8329
---
 src/decode-erspan.c | 6 ++++++
 src/decode-erspan.h | 7 +------
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/src/decode-erspan.c b/src/decode-erspan.c
index b87877a5ea..3d4a68e4c1 100644
--- a/src/decode-erspan.c
+++ b/src/decode-erspan.c
@@ -41,6 +41,12 @@
 #include "util-debug.h"
 #include "conf.h"
 
+typedef struct ErspanHdr_ {
+    uint16_t ver_vlan;
+    uint16_t flags_spanid;
+    uint32_t padding;
+} __attribute__((__packed__)) ErspanHdr;
+
 /**
  * \brief Functions to decode ERSPAN Type I and II packets
  */
diff --git a/src/decode-erspan.h b/src/decode-erspan.h
index 350eb5ef30..62de969e67 100644
--- a/src/decode-erspan.h
+++ b/src/decode-erspan.h
@@ -25,11 +25,6 @@
 #ifndef SURICATA_DECODE_ERSPAN_H
 #define SURICATA_DECODE_ERSPAN_H
 
-typedef struct ErspanHdr_ {
-    uint16_t ver_vlan;
-    uint16_t flags_spanid;
-    uint32_t padding;
-} __attribute__((__packed__)) ErspanHdr;
-
 void DecodeERSPANConfig(void);
+
 #endif /* SURICATA_DECODE_ERSPAN_H */