[Snort-users] tcpdump for [!] WARNING: Not IPv4 datagram! ([ver: 0x5][len: 0xdc05])]
jsage at ...2022...
Mon Jul 22 11:29:06 EDT 2002
What was the question, again?
The "[!] WARNING: Not IPv4 datagram!" deal?
You are capturing to file with tcpdump -w (what libpcap version?) and
reading the packet captures back through snort? (what snort version?).
When I replay the attachment you posted through snort 1.8.7 build 128,
it replays perfectly.
"Cowardly refusing to create an empty archive."
PGP key http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint FE 97 0C 57 08 43 F3 EB 49 A1 0C D0 8E 0C D0 BE C8 38 CC B5
On Mon, Jul 22, 2002 at 11:53:29AM -0500, max valdez wrote:
> Subject: tcpdump for [!] WARNING: Not IPv4 datagram! ([ver: 0x5][len:
> From: max valdez <max at ...6164...>
> To: snort-users at lists.sourceforge.net
> X-Mailer: Ximian Evolution 1.0.3 (1.0.3-6)
> Date: 22 Jul 2002 11:52:24 -0500
> I sent last week an attachment from my box using tcpdump as capturer, I
> was stupid enought to make it too big to pass to the list, here is
> another again.
> Thanks for your answer Chris, I hope the problem can be corrected
> easyly, I need to see my alerts again !! :-)
> Thanks in advance
More information about the Snort-users