[Bro] HTTP not being seen

[Seth Hall]

On Sep 16, 2013, at 8:26 AM, James Lay <jlay at slave-tothe-box.net> wrote:

> I completely agree.  In my case however, I believe it's a "feature" of PPPoE…those same packets captured on the physical eth1 NIC are flawless with zero issues.  I tried having Bro listen to eth1, but I don't think it plays with the PPPoE.  Thanks for the input Seth.


Hm, I think I have a patch around somewhere that adds PPPoE support to Bro… yep, found it.	
	topic/seth/pppoe

I also went ahead and updated that branch to be only diffs against the current master branch.  Let me know if you need any help if you decide to give it a try.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20130916/6de3d91d/attachment.bin