[Bro] Network tap issues
hovsep.sanjay.levi at gmail.com
Wed Jun 21 09:42:50 PDT 2017
I've dealt with this before although I don't really understand it
technically. Some sort of layer1-ish protocol.. the only way I can explain
it is something like Cisco's UDLD.. the NIC detects a fault in the circuit
due to a half connected state and shuts down the laser/LED for safety
You might find some obscure low-level setting for the NIC to force it into
a special monitor mode similar to how wifi monitor mode works.
What happens if you force the interface up and run tcpdump ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro