Re: Snort and GTP encapsulation info

[Ana Serrano Mamolar <B00315494 () studentmail uws ac uk>]

In this case, with GRE+GTP it seems that is not working at all.

When gtp is enabled in the config, it can not filter by inner IP (GTP IP) as it happens when it just a GTP pcap.

Then, when gtp is disabled in the config, it can not filter by gtp_info or gtp_version as it happens when it just GTP 
pcap.

Thanks

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!