inliniac/suricata — pull request #1160 by jasonish (2014-10-08 16:38:36+00:00)
Title: MPLS Decoder, v4

Better payload guess, don't blindly fall back to ethernet as ethernet should be preceded by a pseudowire.

Raise an alert in the case of unknown payload.

- PR build: https://buildbot.openinfosecfoundation.org/builders/jasonish/builds/13
- PR pcaps: https://buildbot.openinfosecfoundation.org/builders/jasonish-pcap/builds/13