Hi Team
I understood on the IRC channel that 802.1BR E tag are not understood today by Suricata but this capability can be added.I am sending a couple of pcap packet that include this tag.
802.1BR-Etag-example.pcap (108 Bytes)
802.1BR-Etag-example2.pcap (116 Bytes)
BRs
John