[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bro
Subject:    Re: [Bro] Multi interfaces, one with and one without vlan tagging
From:       Vern Paxson <vern () icir ! org>
Date:       2007-10-11 19:02:43
Message-ID: 200710111902.l9BJ2mM8024703 () pork ! ICSI ! Berkeley ! EDU
[Download RAW message or body]

> I'm just wondering, what will be the best approch to filter vlan tags when I
> have Bro listening on two interfaces, which one needs to have a vlan
> filter and the other doesn't?

Unfortunately you will have to modify Bro's internals to do that.

This is a general problem: when monitoring multiple interfaces, Bro currently
is structured to assume that they're all using the same link layer.

		Vern

[prev in list] [next in list] [prev in thread] [next in thread]