diff --git a/src/decode.h b/src/decode.h index 1a844525dafc..0627bea7f216 100644 --- a/src/decode.h +++ b/src/decode.h @@ -1202,7 +1202,8 @@ static inline bool DecodeNetworkLayer(ThreadVars *tv, DecodeThreadVars *dtv, if (unlikely(len < ETHERNET_DCE_HEADER_LEN)) { ENGINE_SET_INVALID_EVENT(p, DCE_PKT_TOO_SMALL); } else { - DecodeEthernet(tv, dtv, p, data, len); + // DCE layer is ethernet + 2 bytes, followed by another ethernet + DecodeEthernet(tv, dtv, p, data + 2, len - 2); } break; case ETHERNET_TYPE_VNTAG: