[Bro] Issue with small pcap files and -r

[Mike Sconzo]

I might have some free cycles to poke at adding this functionality, it
may be entirely out of may capability at the moment but any help of
"if I were going to add it this is where it would need to go" would be
helpful in figuring out if I can do it or not.

If it's done in binpac++ I'll just bow out now. :)

On Tue, Jan 8, 2013 at 10:00 AM, Robin Sommer <robin at icir.org> wrote:
>
>
> On Mon, Jan 07, 2013 at 20:06 -0600, you wrote:
>
>> However, the pcaps I'm testing on have a GRE tunnel in them.
>
> Ah, that explains it, GRE support isn't there yet (but should pretty
> straight-forward to add; we have a ticket for that
> http://tracker.bro-ids.org/bro/ticket/867)
>
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
> ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



-- 
cat ~/.bash_history > documentation.txt