[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oisf-users
Subject:    Re: [Oisf-users] Processing PCAP file with Radio Tap header
From:       Tom DeCanio <decanio.tom () gmail ! com>
Date:       2017-11-23 5:40:16
Message-ID: CAD419XgzLJ1a5OULDGh6v272spx_4KxBv1hxqa8dZAOggtkoUw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Manuel;

I've done some work with adding some wireless support to suricata in
support of IoT.  You can find some of the work here
https://github.com/decanio/suricata-IoT.

I'm not sure I added support for radio tap headers.  If you can provide a
pcap for me to work with perhaps its not difficult to add.

Tom

On Wed, Nov 22, 2017 at 5:24 PM LUIS MANUEL SILVA CASTILLO <
luismsilvacastillo@gmail.com> wrote:

> Hi everyone,
>
> I'm trying to process a PCAP file which contains radio tap headers but it
> crashes suricata instance. Any help would be appreciated
>
>
> Thanks,
>
> Manuel
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/

[Attachment #5 (text/html)]

<div dir="ltr">Manuel;<div><br></div><div>I&#39;ve done some work with adding some \
wireless support to suricata in support of IoT.   You can find some of the work here  \
<a href="https://github.com/decanio/suricata-IoT">https://github.com/decanio/suricata-IoT</a>.</div><div><br></div><div>I&#39;m \
not sure I added support for radio tap headers.   If you can provide a pcap for me to \
work with perhaps its not difficult to \
add.</div><div><br></div><div>Tom</div></div><br><div class="gmail_quote"><div \
dir="ltr">On Wed, Nov 22, 2017 at 5:24 PM LUIS MANUEL SILVA CASTILLO &lt;<a \
href="mailto:luismsilvacastillo@gmail.com">luismsilvacastillo@gmail.com</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div>Hi \
everyone,<br><br></div>I&#39;m trying to process a PCAP file which contains radio tap \
headers but it crashes suricata instance. Any help would be \
appreciated<br><br><br></div>Thanks,<br><br></div>Manuel<br></div> \
_______________________________________________<br> Suricata IDS Users mailing list: \
<a href="mailto:oisf-users@openinfosecfoundation.org" \
                target="_blank">oisf-users@openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" rel="noreferrer" \
target="_blank">http://suricata-ids.org</a> | Support: <a \
href="http://suricata-ids.org/support/" rel="noreferrer" \
                target="_blank">http://suricata-ids.org/support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" \
rel="noreferrer" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
 <br>
Conference: <a href="https://suricon.net" rel="noreferrer" \
                target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" \
target="_blank">https://suricata-ids.org/training/</a></blockquote></div>


[Attachment #6 (text/plain)]

_______________________________________________
Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users

Conference: https://suricon.net
Trainings: https://suricata-ids.org/training/

[prev in list] [next in list] [prev in thread] [next in thread]