Re: [netsniff-ng] netsniff-ng and ERSPAN

2013-10-22 Thread Daniel Borkmann
On 10/21/2013 05:00 PM, Doug Burks wrote: Hello all, Have you considered implementing support for decoding ERSPAN? Looks like gulp and snort currently support this: Are you referring to the packet dissector or to store the decapsulated data to a pcap file?

Re: [netsniff-ng] netsniff-ng and ERSPAN

2013-10-22 Thread Doug Burks
Hi Daniel, I'm referring to running netsniff-ng, having it accept ERSPAN data, and write the decapsulated data to a pcap file. Thanks, Doug On Tue, Oct 22, 2013 at 4:23 AM, Daniel Borkmann dbork...@redhat.com wrote: On 10/21/2013 05:00 PM, Doug Burks wrote: Hello all, Have you considered