[Bro] Removing tags from traffic

Adam Greenhalgh a.greenhalgh at cs.ucl.ac.uk
Mon Sep 19 15:09:05 PDT 2005

# Make any changes to policy starting here

@load vlan

try adding that to <machine.site.com>.bro in /usr/local/bro/site


On 19/09/05, Joncarlo Ruggieri <jruggieri at ucdavis.edu> wrote:
> Hi,
> Our Network Operations Center made some changes to the infrastructure, and
> now all traffic seen by our Bro systems is tagged.  As a result, Bro is
> not capturing traffic (or so it seems).  Is it possible to configure Bro
> to remove or ignore the tags?  Are there any (other) suggestions?
> We are also checking with our NOC to see if they can un-tag the traffic.
> Thanks!
> Jon Ruggieri
> University of CA, Davis
> Data Center & Client Services
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

More information about the Bro mailing list