[Bro] Issue with small pcap files and -r
Robin Sommer
robin at icir.org
Tue Jan 8 08:00:27 PST 2013
On Mon, Jan 07, 2013 at 20:06 -0600, you wrote:
> However, the pcaps I'm testing on have a GRE tunnel in them.
Ah, that explains it, GRE support isn't there yet (but should pretty
straight-forward to add; we have a ticket for that
http://tracker.bro-ids.org/bro/ticket/867)
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list