Barnyard2/Base MAC Address from PCAP

[Gordon Wallum <gordon_wallum () otowfl com>]

Looking to pull layer 2 information from Barnyard2/BASE PCAP file

The mac addresses are just showing as fake place holders: de:ad:ca:fe:ba:be and 11:22:33:44:55:66

Anyway to capture this information form base without having to go into the unified2 log?


Thank you,



[cid:image002.png@01CF8FC6.440C3120]

Gordon Wallum



Network Security Administrator
Information Technology Department



On Top of the World Communities & Related Entities
P 352.873.0848 x.7412   F 352.861.9569
9860 SW 84 Court, Suite D, Ocala, FL 34481
OnTopoftheWorld.com<http://www.ontopoftheworld.com/>




[cid:image003.png@01CF8FC6.14F91B00]<http://www.facebook.com/pages/Ocala-FL/On-Top-of-the-World-Communities-Ocala-FL/170476803860?v=app_4949752878>[cid:image005.png@01CF8FC6.440C3120]<http://twitter.com/otowfl>[cid:image007.png@01CF8FC6.440C3120]<http://www.youtube.com/ontopoftheworld2007>
 [cid:image009.png@01CF8FC6.440C3120] <http://ontopoftheworldocala.blogspot.com/>

P Please consider the environment before printing this e-mail or other documents.

The contents of this e-mail message and any attachments are confidential and are intended solely for addressee. The 
information may also be legally privileged. This transmission is sent in trust, for the sole purpose of delivery to the 
intended recipient. If you have received this transmission in error, any use, reproduction or dissemination of this 
transmission is strictly prohibited. If you are not the intended recipient, please immediately notify the sender by 
reply e-mail or phone and delete this message and its attachments, if any.

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette