[Bro] PPPoE support

Will Havlovick will.havlovick at zenimax.com
Wed Sep 19 09:35:04 PDT 2012


One of my sites is monitoring a link that has all PPPoE traffic on it.  The Bro Sensor was not logging the traffic due to it being PPPoE.  The bro version was 2.1 stable.

I found this(thank you Seth for writing this) :
https://github.com/bro-ids/bro/commit/908b1a17d1b08a8473695316e56eb98f7b005cbd

and added it to the PktSrc.cc of the Bro2.1 Stable release source.  Then recompiled and now my sensor seems to be logging the traffic properly.

This is probably not the best way to do things.

My question is: Will PPPoE support be in 2.2?


Will
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20120919/ea16ecd0/attachment.html 


More information about the Bro mailing list