[Snort-users] Snort: cannot decode data link type

Qinwen Hu qhu009 at ...15379...
Wed Nov 16 02:32:51 EST 2011


Hi All:

I have used my Snort-2.9.1.1 to read some trace files, because my trace
file used "ATM" protocol. therefore Snort cannot decode it, I have check
snort source file, I find 'Snort.c' will check the base protocol for each
frame. so I just wondering, if any one can tell me how to change this C
file and let the Snort can recognize the ATM protocol.

Many Thanks

Regards

Steven
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111116/5e405ab9/attachment.html>


More information about the Snort-users mailing list