[Bro] BRO with MPLS + 802.1 Q vlan

Seth Hall hall.692 at osu.edu
Mon Feb 22 05:09:45 PST 2010

On Feb 22, 2010, at 7:07 AM, Veronica Estrada wrote:

> I need to process an .erf file with contains mpls packets  
> encapsulated in 802.1 q vlan tunnels. How can I process it with BRO?  
> Do I have to redefine any variable?

Bro doesn't support MPLS packets currently.  Patches are welcome  
however. :)

I can give you a hand stripping all of the additional headers off-list  
if you want.  It's a little beyond the scope of this list.


Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721

More information about the Bro mailing list