This is a discussion on [Snort-users] snort and ATM within the Snort forums, part of the System Security and Security Related category; hi, I tried to install Snort under FreeBSD 5.3 to capture trafic on an atm interface. After many attempts, ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
hi,
I tried to install Snort under FreeBSD 5.3 to capture trafic on an atm interface. After many attempts, snort didn't run : snort performed but exited just after. I managed to run some tools like tcpdump (based on libpcap too) but not Snort. After some research, i found a paper about someone (thanks emilio) who managed to implement snort on an atm network. Its snort captured trafic on the atm interface. This station was installing with RedHat. So i decided to let my FreeBSD (snif) for RedHat 9 and tried to implement snort to capture trafic on my atm interface. And it worked. So my question is simple : how could i manage to run snort to capture trafic on a atm interface if snort doesn't handle atm? Is it because decapsulation on RedHat9 is made so that snort is able to understand ip packets or something like this? Or maybe the latest libpcap could handle atm now? I'm very curious about to know how it worked. Thanks for your answer. Best regards, Teva AVRIL ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |