RE: capturing arp

["Spencer, Arthur" <Arthur.Spencer () umassmed edu>]

In all of my tests you can't capture arp packets because they are
handled in hardware.  If you use Nemesis and generate an ARP packet it
isn't captured by Ethereal or Network General Sniffer.  

* Arthur J. Spencer (CISSP, CCNP, CCDP, MCSE, CNE)
 

-----Original Message-----
From: Patrick Amirian [mailto:pamirian () calculus ca] 
Sent: Friday, April 11, 2003 3:41 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] capturing arp

Hi guys,
I'm trying to caputre all arp packets doing


Alert arp any any <> any any

But I'm getting a segfault.
Ideas ?

Thank you. 



-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The
debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost
and 
disoriented. TotalView can help you find your way. Available on major
UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users