# 802.1BR E Tag support

**URL:** https://forum.suricata.io/t/802-1br-e-tag-support/594
**Category:** Developers
**Created:** [September 11, 2020, 8:37am UTC](https://forum.suricata.io/t/802-1br-e-tag-support/594 "2020-09-11T08:37:10Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![satjuice](https://avatars.discourse-cdn.com/v4/letter/s/3ab097/32.png) [@satjuice](https://forum.suricata.io/u/satjuice)
#### Post date: [September 11, 2020, 8:37am UTC](https://forum.suricata.io/t/802-1br-e-tag-support/594/1 "2020-09-11T08:37:10Z")

</div>

Hi Team

I understood on the IRC channel that 802.1BR E tag are not understood today by Suricata but this capability can be added.I am sending a couple of pcap packet that include this tag.  
[802.1BR-Etag-example.pcap](https://forum.suricata.io/uploads/short-url/uMx17z7ltgO9k9mIGRFzKXrC70k.pcap) (108 Bytes)  
[802.1BR-Etag-example2.pcap](https://forum.suricata.io/uploads/short-url/z9tPdTbzMqiRNDPZrf3ALIpbhsy.pcap) (116 Bytes)

BRs  
John

---

<div class="post-metadata">

### Author: ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)
#### Post date: [September 12, 2020, 7:21pm UTC](https://forum.suricata.io/t/802-1br-e-tag-support/594/2 "2020-09-12T19:21:27Z")

</div>

I would recommend that you add this as a feature request to our redmine: [https://redmine.openinfosecfoundation.org](https://redmine.openinfosecfoundation.org)

---

<div class="post-metadata">

### Author: ![Philippe\_Antoine1](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/philippe_antoine1/32/3712_2.png) [@Philippe\_Antoine1](https://forum.suricata.io/u/Philippe_Antoine1)
#### Post date: [September 15, 2025, 1:00pm UTC](https://forum.suricata.io/t/802-1br-e-tag-support/594/3 "2025-09-15T13:00:23Z")

</div>

> **[Feature #3953: 8021BR E packet decoder - Suricata - Open Information Security...](https://redmine.openinfosecfoundation.org/issues/3953)**
>
> Redmine
