[Snort-users] Snort on an 802.1q link

Christopher Lyon cslyon at ...6523...
Fri Oct 25 17:19:06 EDT 2002

So there is no configuration needed? Snort will read pass the tagging and
just go right to the layer 3 information?

-----Original Message-----
From: Jason [mailto:security at ...5028...] 
Sent: Friday, October 25, 2002 5:16 PM
To: Christopher Lyon
Cc: 'snort-users at lists.sourceforge.net'
Subject: Re: [Snort-users] Snort on an 802.1q link

It should just work, I've tested it before but ended up not using it.

Christopher Lyon wrote:

> Hi all,
> I have a campus environment with uplinks to remote switches that are 
> using 802.1q tagging. There are a bunch of VLANs that are going over 
> these links so I want to be able to look at all the traffic. Is there 
> a configuration on Snort or the OS platform that needs to be done in 
> order to read the information going over these links? I am using RH 8.0.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20021025/f77b85cd/attachment.html>

More information about the Snort-users mailing list