[Bro] HTTP not being seen

Seth Hall seth at icir.org
Mon Sep 16 08:20:05 PDT 2013

On Sep 16, 2013, at 8:26 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> I completely agree.  In my case however, I believe it's a "feature" of PPPoE…those same packets captured on the physical eth1 NIC are flawless with zero issues.  I tried having Bro listen to eth1, but I don't think it plays with the PPPoE.  Thanks for the input Seth.

Hm, I think I have a patch around somewhere that adds PPPoE support to Bro… yep, found it.	

I also went ahead and updated that branch to be only diffs against the current master branch.  Let me know if you need any help if you decide to give it a try.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130916/6de3d91d/attachment.bin 

More information about the Bro mailing list