Skip to content

Add support for the FreeBSD 13.1 PFLOG header size#10

Open
moracca wants to merge 1 commit into
snort3:masterfrom
moracca:add_freebsd131_pflog_header
Open

Add support for the FreeBSD 13.1 PFLOG header size#10
moracca wants to merge 1 commit into
snort3:masterfrom
moracca:add_freebsd131_pflog_header

Conversation

@moracca

@moracca moracca commented Feb 24, 2023

Copy link
Copy Markdown

FreeBSD's pflog header format has diverged from OpenBSD, and the changes to FreeBSD's header are no longer compatible with the defined header structures within snort. This patch adds support for the new 69 byte (72 with padding) header used in FreeBSD 13.1

Relevant FreeBSD commit changing the pflog header structure: https://reviews.freebsd.org/D32750

FreeBSD's pflog header format has diverged from OpenBSD, and the changes
to FreeBSD's header are no longer compatible with the defined header
structures within snort.  This patch adds support for the new 69 byte
(72 with padding) header used in FreeBSD 13.1

Relevant FreeBSD commit changing the pflog header structure:
https://reviews.freebsd.org/D32750
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant