Snort mailing list archives
RE: How does snort handle 802.1Q VLAN tag packets?
From: "Eric Hines" <eric.hines () appliedwatch com>
Date: Wed, 9 Feb 2005 16:21:05 -0600
Nyuk, We have a customer with a VLAN 802.1Q network and Snort runs just fine. Make sure that the Snort management system you use is capable of understanding the 802.1Q packet structure when it parses the packets from the snort logs. Best Regards, Eric Hines, GCIA, CISSP CEO, President, Chairman Applied Watch Technologies, LLC 1134 N. Main St. Algonquin, IL 60102 Tel: (877) 262-7593 x327 Fax: (877) 262-7593 Web: http://www.appliedwatch.com -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Nyuk Loong Kiw Sent: Wednesday, February 09, 2005 4:15 PM To: snort-users () lists sourceforge net Subject: [Snort-users] How does snort handle 802.1Q VLAN tag packets? Hi all, Sorry for a newbie Q. Just finish reading a snort book and have got a play box up and running at home. Would like to know how does snort handle packets' that are VLAN tag? Will snort still be able to decode them properly?? Thanks Kiw ############################################################################ ######### Important: This electronic message and attachments (if any) are confidential and may be legally privileged. If you are not the intended recipient do not copy, disclose or use the contents in any way. Please let us know by return e-mail immediately and then destroy this message. ############################################################################ ######### ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=ick _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=ort-users ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How does snort handle 802.1Q VLAN tag packets? Nyuk Loong Kiw (Feb 09)
- RE: How does snort handle 802.1Q VLAN tag packets? Marc Norton (Feb 09)
- Message not available
- Re: How does snort handle 802.1Q VLAN tag packets? Matt Kettler (Feb 09)
- Web based administration N B (Feb 10)
- Re: Web based administration Matt Kettler (Feb 10)
- RE: Web based administration Brian Jameson (Feb 11)
- Re: How does snort handle 802.1Q VLAN tag packets? Matt Kettler (Feb 09)
- RE: How does snort handle 802.1Q VLAN tag packets? Eric Hines (Feb 09)
- <Possible follow-ups>
- RE: How does snort handle 802.1Q VLAN tag packets? Willy, Andrew (Feb 09)