[Bro] Issue with small pcap files and -r

Robin Sommer robin at icir.org
Tue Jan 8 08:00:27 PST 2013



On Mon, Jan 07, 2013 at 20:06 -0600, you wrote:

> However, the pcaps I'm testing on have a GRE tunnel in them.

Ah, that explains it, GRE support isn't there yet (but should pretty
straight-forward to add; we have a ticket for that
http://tracker.bro-ids.org/bro/ticket/867)

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list