[Bro-Dev] [JIRA] (BIT-1092) Handling of variable size 802.11 link-headers

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Fri Nov 8 12:19:30 PST 2013

     [ https://bro-tracker.atlassian.net/browse/BIT-1092?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-1092:

    Resolution: Rejected
        Status: Closed  (was: Open)

No plans to support variable length headers at this time and this ticket doesn't have any concrete tasks in it so I'm closing.

> Handling of variable size 802.11 link-headers 
> ----------------------------------------------
>                 Key: BIT-1092
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1092
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: 2.0, 2.1
>            Reporter: Fahad Arshad
> This issue has been discussed before at this location:
> http://comments.gmane.org/gmane.comp.security.detection.bro/3932
> Running Bro on version 2.0 or 2.1 results in the following error
> $ bro -r ~/Documents/airportSniff-5000-packets.cap 
> fatal error: bro: problem with trace file /home/bro/Documents/airportSniff-5000-packets.cap - unknown data link type 0x7f
> From my understanding (by looking at get_link_header_size() method in src/PktSrc.cc), currently Bro cannot handle variable size header information.
> Is there any future plan to handle variable size header information?

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list