[Bro] BRO with MPLS + 802.1 Q vlan

[Seth Hall]

On Feb 22, 2010, at 7:07 AM, Veronica Estrada wrote:

> I need to process an .erf file with contains mpls packets  
> encapsulated in 802.1 q vlan tunnels. How can I process it with BRO?  
> Do I have to redefine any variable?


Bro doesn't support MPLS packets currently.  Patches are welcome  
however. :)

I can give you a hand stripping all of the additional headers off-list  
if you want.  It's a little beyond the scope of this list.

   .Seth

---
Seth Hall
Network Security - Office of the CIO
The Ohio State University
Phone: 614-292-9721