[Bro] Does Bro support pcap file with id 9?

Readon Shaw xydarcher at 163.com
Sun Dec 11 18:07:16 PST 2011


I have attached a pcap file in previous mail.
>
>On Dec 11, 2011, at 4:27 AM, Readon Shaw wrote:
>
>> When i was processing traces downloaded from WAND, it was reported that "Unknown data link type 0x9".
>> I am using Bro 2.0 Beta.
>> If not, is there any solution?
>
>Unfortunately we don't support PPP packets (link type 9) yet.  If you point us to the traces you're are using though, we can make sure that we support PPP when we get around to reworking our packet input process.
>
> .Seth
>
>--
>Seth Hall
>International Computer Science Institute
>(Bro) because everyone has a network
>http://www.bro-ids.org/
>

--------------
Readon Shaw





More information about the Bro mailing list