[Snort-users] Version 1.8-beta5 (Build 24)

Scott A. McIntyre scott at ...1050...
Fri May 18 09:50:08 EDT 2001


Hi,

Is there any reason why the linux "-i any" argument to listen on any
interface would break the VLAN parsing code?

Using version 1.8-beta5 (Build 24) I can bind to one particular
interface and it works fine, but if I bind to "any" then almost all
traffic is recognized only as type "other" and snort doesn't snort.

Thanks for any ideas.

Scott





More information about the Snort-users mailing list