RE: How does snort handle 802.1Q VLAN tag packets?

["Eric Hines" <eric.hines () appliedwatch com>]

Nyuk,

We have a customer with a VLAN 802.1Q network and Snort runs just fine. Make
sure that the Snort management system you use is capable of understanding
the 802.1Q packet structure when it parses the packets from the snort logs.


Best Regards,


Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC
1134 N. Main St.
Algonquin, IL 60102
Tel: (877) 262-7593 x327
Fax: (877) 262-7593
Web: http://www.appliedwatch.com
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Nyuk Loong Kiw
Sent: Wednesday, February 09, 2005 4:15 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] How does snort handle 802.1Q VLAN tag packets?

Hi all,

Sorry for a newbie Q.

Just finish reading a snort book and have got a play box up and running at
home. Would like to know how does snort handle packets' that are VLAN tag?
Will snort still be able to decode them properly??

Thanks


Kiw
############################################################################
#########
Important: This electronic message and attachments (if any) are confidential
and may be legally privileged. If you are not the intended recipient do not
copy, disclose or use the contents in any way. Please let us know by return
e-mail immediately and then destroy this message.
############################################################################
#########


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide Read honest & candid reviews
on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=ick
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users