Skip to content

Update gopacket vendor from google to gopacket#43

Merged
RickdeJager merged 3 commits intoOpenAttackDefenseTools:masterfrom
xXMarkuski:update-gopacket-vendor
Oct 3, 2025
Merged

Update gopacket vendor from google to gopacket#43
RickdeJager merged 3 commits intoOpenAttackDefenseTools:masterfrom
xXMarkuski:update-gopacket-vendor

Conversation

@xXMarkuski
Copy link
Copy Markdown
Contributor

Hello,

While playing a recent AD CTF, we used tcpdump to log the network traffic from our vulnbox. When running tcpdump -i any, it outputs packets with the LinkType SLL2 (Linux "cooked" capture encapsulation v2), which is not supported by Google's gopacket library. As a result, Tulip was unable to process the packets.

Since Google's gopacket library hasn't seen any commits in two years, a fork has been created to continue maintaining this library.

Support for SLL2 has been implemented in gopacket and merged into the fork.

This pull request switches the gopacket library to the current fork, adding SLL2 support to Tulip. The change was tested with pcaps.

Best regards
Markus

@RickdeJager RickdeJager merged commit b8af07c into OpenAttackDefenseTools:master Oct 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants