[Bro] Removing tags from traffic

Adam Greenhalgh a.greenhalgh at cs.ucl.ac.uk
Mon Sep 19 15:09:05 PDT 2005


# Make any changes to policy starting here

@load vlan


try adding that to <machine.site.com>.bro in /usr/local/bro/site


adam

On 19/09/05, Joncarlo Ruggieri <jruggieri at ucdavis.edu> wrote:
> Hi,
> 
> Our Network Operations Center made some changes to the infrastructure, and
> now all traffic seen by our Bro systems is tagged.  As a result, Bro is
> not capturing traffic (or so it seems).  Is it possible to configure Bro
> to remove or ignore the tags?  Are there any (other) suggestions?
> 
> We are also checking with our NOC to see if they can un-tag the traffic.
> 
> Thanks!
> 
> Jon Ruggieri
> University of CA, Davis
> Data Center & Client Services
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>




More information about the Bro mailing list