[Bro] Multiple encapsulation
Robin Sommer
robin at icir.org
Thu Jan 17 09:03:11 PST 2008
On Thu, Jan 17, 2008 at 08:02 -0800, Vern Paxson wrote:
> analysis to do this; but I think easiest would be to hack it in directly,
> right after packets are read, with code hardwired to know how to decapsulate
> the different types of tunneling present in your traces.
I actually do have an experimental patch for this somewhere. Fabian,
please send me a mail if you still need it.
Robin
--
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list