[Bro] Multiple encapsulation

Robin Sommer robin at icir.org
Thu Jan 17 09:03:11 PST 2008


On Thu, Jan 17, 2008 at 08:02 -0800, Vern Paxson wrote:

> analysis to do this; but I think easiest would be to hack it in directly,
> right after packets are read, with code hardwired to know how to decapsulate
> the different types of tunneling present in your traces.

I actually do have an experimental patch for this somewhere. Fabian,
please send me a mail if you still need it. 

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list