bgp: Parse BGP extended message support capability

[tcpdump] / print-macsec.c

diff --git a/print-macsec.c b/print-macsec.c
index 2c955c5a0966b740c00c5412b98561d0156bf66c..8b4b318bae31c80c5e9bcaaed86ea1315e3b6156 100644 (file)
--- a/print-macsec.c
+++ b/print-macsec.c
@@ -25,7 +25,7 @@
 #include <config.h>
 #endif
 
-#include <netdissect-stdinc.h>
+#include "netdissect-stdinc.h"
 
 #include "netdissect.h"
 #include "addrtoname.h"
@@ -219,6 +219,12 @@ macsec_print(netdissect_options *ndo, const u_char **bp,
        }
        *lengthp -= MACSEC_DEFAULT_ICV_LEN;
        *caplenp -= MACSEC_DEFAULT_ICV_LEN;
+       /*
+        * Update the snapend thus the ICV field is not in the payload for
+        * the caller.
+        * The ICV (Integrity Check Value) is at the end of the frame, after
+        * the secure data.
+        */
        ndo->ndo_snapend -= MACSEC_DEFAULT_ICV_LEN;
 
        /*