snort and ATM

["Teva AVRIL" <teva.avril () esigetel fr>]

hi,

I tried to install Snort under FreeBSD 5.3 to capture trafic on an atm
interface. After many attempts, snort didn't run : snort performed but
exited just after. I managed to run some tools like tcpdump (based on
libpcap too) but not Snort.

After some research, i found a paper about someone (thanks emilio) who
managed to implement snort on an atm network. Its snort captured trafic on
the atm interface. This station was installing with RedHat.

So i decided to let my FreeBSD (snif) for RedHat 9 and tried to implement
snort to capture trafic on my atm interface. And it worked.

So my question is simple : how could i manage to run snort to capture
trafic on a atm interface if snort doesn't handle atm? Is it because
decapsulation on RedHat9 is made so that snort is able to understand ip
packets or something like this? Or maybe the latest libpcap  could handle
atm now?

I'm very curious about to know how it worked. Thanks for your answer.

Best regards,

Teva AVRIL


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users