[Bro-Dev] [JIRA] (BIT-1092) Handling of variable size 802.11 link-headers

Fahad Arshad (JIRA) jira at bro-tracker.atlassian.net
Sat Oct 19 12:59:51 PDT 2013


Fahad Arshad created BIT-1092:
---------------------------------

             Summary: Handling of variable size 802.11 link-headers 
                 Key: BIT-1092
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1092
             Project: Bro Issue Tracker
          Issue Type: Problem
          Components: Bro
    Affects Versions: 2.1, 2.0
            Reporter: Fahad Arshad


This issue has been discussed before at this location:
http://comments.gmane.org/gmane.comp.security.detection.bro/3932

Running Bro on version 2.0 or 2.1 results in the following error

$ bro -r ~/Documents/airportSniff-5000-packets.cap 
fatal error: bro: problem with trace file /home/bro/Documents/airportSniff-5000-packets.cap - unknown data link type 0x7f

>From my understanding (by looking at get_link_header_size() method in src/PktSrc.cc), currently Bro cannot handle variable size header information.

Is there any future plan to handle variable size header information?



--
This message was sent by Atlassian JIRA
(v6.1-OD-09-WN#6144)


More information about the bro-dev mailing list