[Snort-users] capturing arp

Jacques jbrierre at ...163...
Mon Apr 14 06:58:02 EDT 2003

On Monday, April 14, 2003, at 07:39  AM, Spencer, Arthur wrote:

> In all of my tests you can't capture arp packets because they are
> handled in hardware.  If you use Nemesis and generate an ARP packet it
> isn't captured by Ethereal or Network General Sniffer.
That's strange... Ethereal regularly shows me ARP packets from/to 
router and surrounding devices. Maybe I'm missing something?


More information about the Snort-users mailing list