MACsec: Add a comment about the previous change

[skip ci]

diff --git a/print-macsec.c b/print-macsec.c
index 2c955c5a0966b740c00c5412b98561d0156bf66c..632570b0ca69f1e4f958b33f81c8830731002bdb 100644 (file)
--- a/print-macsec.c
+++ b/print-macsec.c
@@ -219,6 +219,12 @@ macsec_print(netdissect_options *ndo, const u_char **bp,
        }
        *lengthp -= MACSEC_DEFAULT_ICV_LEN;
        *caplenp -= MACSEC_DEFAULT_ICV_LEN;
+       /*
+        * Update the snapend thus the ICV field is not in the payload for
+        * the caller.
+        * The ICV (Integrity Check Value) is at the end of the frame, after
+        * the secure data.
+        */
        ndo->ndo_snapend -= MACSEC_DEFAULT_ICV_LEN;
 
        /*