[Snort-users] Sniffers Misbehaviors (MS Network Monitor & tcpdump)?

Fyodor fygrave at ...121...
Tue Jan 2 13:24:08 EST 2001


On Tue, Jan 02, 2001 at 10:08:59AM -0800, Ryan Russell wrote:
> Ethernet has a minimum frame size.  48 bytes, I think.  Some sniffers will
> display the padding, some won't.
> 

Aha.. that explains why (with just committed change applied) sometimes I observe 6-bytes difference
in legimate packets. Shall we get rid off those warning messages then? :)


-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




More information about the Snort-users mailing list