4 Commits (72829dbaea1d17370c486fa8c7504fb399efb534)

Author	SHA1	Message	Date
Fupeng Zhao	7a04a032b9	decoder/vxlan: fix VXLAN port detection per RFC 7348 ... Simplify DecodeVXLANEnabledForPort() to only check destination port to avoids false positives when identifying VXLAN traffic. Per RFC 7348 §5, VXLAN identification is based solely on the outer UDP destination port (4789), regardless of inner packet direction. The outer UDP source port is used for load balancing via inner packet hash and should not be considered for VXLAN detection. This ensures correct VXLAN identification for all encapsulated traffic patterns. Checking both source and destination ports could incorrectly classify non-VXLAN UDP traffic as VXLAN when the source port happens to be 4789, leading to false positives in VXLAN detection and potential decode errors.	1 year ago
Jason Ish	44388f1b69	src: make include guards more library friendly ... Include guards for libraries should use a prefix that is meaningful for the library to avoid conflicts with other user code. For Suricata, use SURICATA. Additionally, remove the pattern of leading and trailing underscores as these are reserved for the language implementation per the C and C++ standards.	3 years ago
Victor Julien	82de6e0659	decoder/vxlan: improvements and cleanups ... Implement port config handling. Also check both src port and dest port for tunnels that only set the destination port to the VXLAN port. At the point of the check we don't know the packet direction yet. Implement as Suricata tunnel similar to Teredo. Cleanups.	7 years ago
Henrik Lund Kramshoej	3519b011b7	decoder/vxlan: initial implementation of decoder	7 years ago