bro 2.5.4 Cannot Process PPPoE over QinQ Packets

Description

Hey!

When I use the following command to process the pcap file, bro cannot read the pcap and no packet-related log is generated.

bro -r ../QinQ.pcap.cap local "Log::default_rotation_interval = 1 day"

Just produced the following log:

capture_loss.log
loaded_scripts.2011-01-08-22-32-30.log
packet_filter.2011-01-08-22-32-30.log
reporter.log
stats.2011-01-08-22-32-30.log

Test packet download link:
http://packetlife.net/captures/QinQ.pcap.cap

Environment

CentOS Linux release 7.5.1804

Status

Assignee

Robin Sommer

Reporter

ChenHui.Li

Labels

External issue ID

None

Components

Affects versions

2.5.4

Priority

Normal
Configure