[Snort-users] Snort not seeing IP-traffic, just Ether/Other

Eoin Miller eoin.miller at ...14586...
Thu Apr 18 16:42:36 EDT 2013


On 4/18/2013 20:36, Kim.Halavakoski at ...16243... wrote:
> Also, any VLAN action going on? Yes, thre should be and are VLANs on the
> span port(Windows 7 sees them...) but for some reason the VLAN traffic
> is not seen by this box with the current configuration and OS..

Yea, you need to create your VLAN interface on the box and sniff on that
in order to see the packets. Just how the OS is.

http://unixfoo.blogspot.com/2007/12/linux-vlan-configuration.html

-- Eoin




More information about the Snort-users mailing list