Signature for bridging protocols

[Juan Camilo Valencia <juan.valencia () seguratec com co>]

Hi Guys,

I´m researching a little bit for signatures to detect packages that came
out from interfaces in bridge mode, I have a big document from IEEE for
802.1D, I´m reading right now how works the protocol, but at the same time
I want to ask you guys if someone had been deal with this need too.

If somebody has some info, can you share with me?

Thanks a lot for your advance.

Best regards from Colombia.

-- 
JUAN CAMILO VALENCIA VARGAS
Ingeniero de Operaciones
SeguraTec S.A.S
Calle 11 # 43B-50 of 307
Medelllín Colombia

*“Choose a job you love, and you will never have to work a day in your life”
*

------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!