Bro with 802.1Q vlans?

Kevin Schmidt kps at
Sun Nov 9 11:55:05 PST 2003

Hello all,

Is there a trick/option to make bro work with 802.1Q-tagged VLANs?  I
have an interface that receives tagged frames, but it appears bro does
not reliably use the correct frame offsets.  I suspect this may be an
artifact of the way libpcap handles vlans, but that's just a guess. 
Perhaps I'm missing something obvious, so any suggestions are welcome.


Kevin Schmidt                                kps at
Campus Network Programmer                    (805) 893-7779
Office of Information Technology             (805) 893-5051 FAX
University of California, Santa Barbara      
North Hall 2124
Santa Barbara, CA 93106-3201                 

More information about the Bro mailing list