Snort mailing list archives
Re: does snort support token ring card
From: Martin Olsson <elof () sentor se>
Date: Fri, 28 Nov 2003 14:14:21 +0100 (CET)
On Tue, 25 Nov 2003, Matt Kettler wrote:
At 04:40 PM 11/25/2003, Luo, Philip wrote:I tried to bring up the snort on RH Linux 8 in toke ring environment.*theoretically* snort supports token ring.. However, you're the only person I've heard of that actually has a token ring network to try it on.
I haven't tried it on Token-Ring either, but I guess that even if snort itself support token ring frames, many of the snort rules are built with fix offsets for ethernet-frames. If I'm not mistaken, token-ring-frames might have larger DLC or LLC headers, putting the IP-header on a different offset than in an ethernet frame. /Martin - just guessing ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- does snort support token ring card Luo, Philip (Nov 25)
- Re: does snort support token ring card Matt Kettler (Nov 25)
- Re: does snort support token ring card Martin Olsson (Nov 28)
- Re: does snort support token ring card Matt Kettler (Nov 28)
- Re: does snort support token ring card Martin Olsson (Nov 28)
- Re: does snort support token ring card Matt Kettler (Nov 25)