Bro with 802.1Q vlans?
kps at ucsb.edu
Sun Nov 9 11:55:05 PST 2003
Is there a trick/option to make bro work with 802.1Q-tagged VLANs? I
have an interface that receives tagged frames, but it appears bro does
not reliably use the correct frame offsets. I suspect this may be an
artifact of the way libpcap handles vlans, but that's just a guess.
Perhaps I'm missing something obvious, so any suggestions are welcome.
Kevin Schmidt kps at ucsb.edu
Campus Network Programmer (805) 893-7779
Office of Information Technology (805) 893-5051 FAX
University of California, Santa Barbara
North Hall 2124
Santa Barbara, CA 93106-3201
More information about the Bro