[Bro] erspan decapsulation

Seth Hall seth at icir.org
Wed Apr 15 05:09:08 PDT 2015

> On Apr 14, 2015, at 10:57 AM, Giedrius Ramas <giedrius.ramas at gmail.com> wrote:
> Hello, we have problems with ERSPAN package. Is there anyway BRO could understand them ?

Could you privately provide us a small packet capture of ERSPAN packets?


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list