[Bro] ipv6

Seth Hall hall.692 at osu.edu
Tue Jan 13 08:44:23 PST 2009


On Jan 13, 2009, at 11:37 AM, dikshie wrote:

> 2.I use Bro-1.4 install from FreeBSD ports by add
>   --enable-brov6 to CONFIGURE_ARGS=
>  but bro fail to read ipv6 traces.

Make sure that you set your capture filter to include ipv6 traffic.   
It's not set to include it by default.  From the command line you can  
do -f"ip and ip6" to include all ipv4 and ipv6 traffic.

> 3.does bro can read ip6 multicast traces?

I don't see why it would have any trouble with multicast.

   .Seth

---
Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721




More information about the Bro mailing list