Sicherheitsrisiko in der libpcap - Wann sind tcpdump, snort und wireshark blind?

The libpcap is the foundation of many different tools for monitoring, diagnosing and protecting networks. A bug in the implementation of the analysis of VLANs (802.1q) leads to these programs not receiving important network traffic. This is the written summary of this lecture.