[Bro] HTTP not being seen
seth at icir.org
Mon Sep 16 08:20:05 PDT 2013
On Sep 16, 2013, at 8:26 AM, James Lay <jlay at slave-tothe-box.net> wrote:
> I completely agree. In my case however, I believe it's a "feature" of PPPoE…those same packets captured on the physical eth1 NIC are flawless with zero issues. I tried having Bro listen to eth1, but I don't think it plays with the PPPoE. Thanks for the input Seth.
Hm, I think I have a patch around somewhere that adds PPPoE support to Bro… yep, found it.
I also went ahead and updated that branch to be only diffs against the current master branch. Let me know if you need any help if you decide to give it a try.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130916/6de3d91d/attachment.bin
More information about the Bro