#include <config.h>
#endif
-#include <netdissect-stdinc.h>
-
-#include <string.h>
+#include "netdissect-stdinc.h"
#include "netdissect.h"
#include "addrtoname.h"
-#include "ethertype.h"
#include "extract.h"
#define MACSEC_DEFAULT_ICV_LEN 16
u_int short_length;
save_protocol = ndo->ndo_protocol;
- ndo->ndo_protocol = "MACsec";
+ ndo->ndo_protocol = "macsec";
/* we need the full MACsec header in the capture */
if (caplen < MACSEC_SECTAG_LEN_NOSCI) {
}
*lengthp -= MACSEC_DEFAULT_ICV_LEN;
*caplenp -= MACSEC_DEFAULT_ICV_LEN;
+ /*
+ * Update the snapend thus the ICV field is not in the payload for
+ * the caller.
+ * The ICV (Integrity Check Value) is at the end of the frame, after
+ * the secure data.
+ */
+ ndo->ndo_snapend -= MACSEC_DEFAULT_ICV_LEN;
/*
* If the SL field is non-zero, then it's the length of the