[Snort-devel] [ snort-Patches-420514 ] Fix to allow libpcap's "any" interface

noreply at ...12... noreply at ...12...
Tue May 1 14:26:35 EDT 2001


Patches item #420514, was updated on 2001-05-01 11:26
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=303357&aid=420514&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Dick Porter (dick)
Assigned to: Nobody/Anonymous (nobody)
Summary: Fix to allow libpcap's "any" interface

Initial Comment:
libpcap-0.6 has a hack to allow all interfaces to be
monitored
simultaneously. Unfortunately it encodes all packets
read this
way as DLT_LINUX_SLL.

The attached patch includes a decoder for this packet
type,
and a hack to disable MTU reading if the interface is
called
"any"

- Dick Porter (dick at ...404...)


----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=303357&aid=420514&group_id=3357




More information about the Snort-devel mailing list