[Snort-devel] two fiber interface (vlan) on snort ...

Chris Green cmg at ...402...
Thu Jun 13 05:15:02 EDT 2002


fde <fde at ...1415...> writes:

> Hello,
>
> Did somebody already use snort with two interfaces fiber giga ?
>
> Here the message snort (debug) of error which I obtains with device 'any' :
>
> Here my conf :
> eth0 : admin nids
> eth1 : netgear fiber 621
> eth2 : netgear fiber 621
>
> I use the kernel linux 2.2.21.
>
> I is not this error message when I use only eth1 or eth2.
>
> Snort decode vlan without pbs ...


In order to add this type of support, we need to have pcap formatted
packet captures.

tcpdump -s 1514 -w vlan.cap -i any

and then send to me or put them on a website if they exceed 100K

Thanks,
Chris
-- 
Chris Green <cmg at ...402...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx




More information about the Snort-devel mailing list