Re: Snort not seeing IP-traffic, just Ether/Other

[Eoin Miller <eoin.miller () trojanedbinaries com>]

On 4/18/2013 20:36, Kim.Halavakoski () Crosskey fi wrote:
> Also, any VLAN action going on? Yes, thre should be and are VLANs on the
> span port(Windows 7 sees them...) but for some reason the VLAN traffic
> is not seen by this box with the current configuration and OS..

Yea, you need to create your VLAN interface on the box and sniff on that
in order to see the packets. Just how the OS is.

http://unixfoo.blogspot.com/2007/12/linux-vlan-configuration.html

-- Eoin

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!