From: Roman G. <sl...@sl...> - 2007-04-21 17:43:43
|
Hallo! I found recently out that snort inline or the bridge are not forwarding any bpdu packets! Is this a known problem or a missconfiguration ? Roman Glebov |
From: Will M. <wil...@gm...> - 2007-04-21 18:01:04
|
what does your bridge configuration look like? On 4/21/07, Roman Glebov <sl...@sl...> wrote: > > Hallo! > > I found recently out that snort inline or the bridge are not forwarding > any bpdu packets! > > > Is this a known problem or a missconfiguration ? > > Roman Glebov > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Snort-inline-users mailing list > Sno...@li... > https://lists.sourceforge.net/lists/listinfo/snort-inline-users > |
From: Roman G. <sl...@sl...> - 2007-04-21 18:25:46
|
Sorry, i forgought to tell It is simple bridge with stp off: brctl addbr br0 brctl addif eth0 brctl addif eth1 ifconfig br0 up br0 eth0 eth1 have no adresses. I am using debian unstable kernel : 2.6.18-4-686 With regards Roman Glebov > what does your bridge configuration look like? > > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> Hallo! >> >> I found recently out that snort inline or the bridge are not forwarding >> any bpdu packets! >> >> >> Is this a known problem or a missconfiguration ? >> >> Roman Glebov >> >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by DB2 Express >> Download DB2 Express C - the FREE version of DB2 express and take >> control of your XML. No limits. Just data. Click to get it now. >> http://sourceforge.net/powerbar/db2/ >> _______________________________________________ >> Snort-inline-users mailing list >> Sno...@li... >> https://lists.sourceforge.net/lists/listinfo/snort-inline-users >> > |
From: Will M. <wil...@gm...> - 2007-04-21 19:09:55
|
hmmmm you will not see bpdu's in snort-inline. What makes you think they are not being passed? Do you have stp enabled on the bridge? Regards, Will On 4/21/07, Roman Glebov <sl...@sl...> wrote: > > Sorry, i forgought to tell > It is simple bridge with stp off: > > brctl addbr br0 > brctl addif eth0 > brctl addif eth1 > > ifconfig br0 up > > br0 eth0 eth1 have no adresses. > > I am using debian unstable kernel : > 2.6.18-4-686 > > With regards Roman Glebov > > > > what does your bridge configuration look like? > > > > On 4/21/07, Roman Glebov <sl...@sl...> wrote: > >> > >> Hallo! > >> > >> I found recently out that snort inline or the bridge are not forwarding > >> any bpdu packets! > >> > >> > >> Is this a known problem or a missconfiguration ? > >> > >> Roman Glebov > >> > >> > >> > ------------------------------------------------------------------------- > >> This SF.net email is sponsored by DB2 Express > >> Download DB2 Express C - the FREE version of DB2 express and take > >> control of your XML. No limits. Just data. Click to get it now. > >> http://sourceforge.net/powerbar/db2/ > >> _______________________________________________ > >> Snort-inline-users mailing list > >> Sno...@li... > >> https://lists.sourceforge.net/lists/listinfo/snort-inline-users > >> > > > > |
From: Roman G. <sl...@sl...> - 2007-04-21 20:18:41
|
i did a test . i have one cisco device before the bridge and second cisco device after the bridge. the first sends the bpdu packets all the time, which are never received by the second one after the bridge. my stp on the bridge is off because it should not participate but simple forward all of the traffik. > hmmmm you will not see bpdu's in snort-inline. What makes you think they > are > not being passed? Do you have stp enabled on the bridge? > > Regards, > > Will > > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> Sorry, i forgought to tell >> It is simple bridge with stp off: >> >> brctl addbr br0 >> brctl addif eth0 >> brctl addif eth1 >> >> ifconfig br0 up >> >> br0 eth0 eth1 have no adresses. >> >> I am using debian unstable kernel : >> 2.6.18-4-686 >> >> With regards Roman Glebov >> >> >> > what does your bridge configuration look like? >> > >> > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> >> >> Hallo! >> >> >> >> I found recently out that snort inline or the bridge are not >> forwarding >> >> any bpdu packets! >> >> >> >> >> >> Is this a known problem or a missconfiguration ? >> >> >> >> Roman Glebov >> >> >> >> >> >> >> ------------------------------------------------------------------------- >> >> This SF.net email is sponsored by DB2 Express >> >> Download DB2 Express C - the FREE version of DB2 express and take >> >> control of your XML. No limits. Just data. Click to get it now. >> >> http://sourceforge.net/powerbar/db2/ >> >> _______________________________________________ >> >> Snort-inline-users mailing list >> >> Sno...@li... >> >> https://lists.sourceforge.net/lists/listinfo/snort-inline-users >> >> >> > >> >> > |
From: Will M. <wil...@gm...> - 2007-04-22 02:02:11
|
Are you trunking and using vlans? Regards, Will On 4/21/07, Roman Glebov <sl...@sl...> wrote: > > i did a test . i have one cisco device before the bridge > and second cisco device after the bridge. > > the first sends the bpdu packets all the time, which are never received by > the second one after the bridge. > my stp on the bridge is off because it should not participate but simple > forward all of the traffik. > > > hmmmm you will not see bpdu's in snort-inline. What makes you think they > > are > > not being passed? Do you have stp enabled on the bridge? > > > > Regards, > > > > Will > > > > On 4/21/07, Roman Glebov <sl...@sl...> wrote: > >> > >> Sorry, i forgought to tell > >> It is simple bridge with stp off: > >> > >> brctl addbr br0 > >> brctl addif eth0 > >> brctl addif eth1 > >> > >> ifconfig br0 up > >> > >> br0 eth0 eth1 have no adresses. > >> > >> I am using debian unstable kernel : > >> 2.6.18-4-686 > >> > >> With regards Roman Glebov > >> > >> > >> > what does your bridge configuration look like? > >> > > >> > On 4/21/07, Roman Glebov <sl...@sl...> wrote: > >> >> > >> >> Hallo! > >> >> > >> >> I found recently out that snort inline or the bridge are not > >> forwarding > >> >> any bpdu packets! > >> >> > >> >> > >> >> Is this a known problem or a missconfiguration ? > >> >> > >> >> Roman Glebov > >> >> > >> >> > >> >> > >> > ------------------------------------------------------------------------- > >> >> This SF.net email is sponsored by DB2 Express > >> >> Download DB2 Express C - the FREE version of DB2 express and take > >> >> control of your XML. No limits. Just data. Click to get it now. > >> >> http://sourceforge.net/powerbar/db2/ > >> >> _______________________________________________ > >> >> Snort-inline-users mailing list > >> >> Sno...@li... > >> >> https://lists.sourceforge.net/lists/listinfo/snort-inline-users > >> >> > >> > > >> > >> > > > > |
From: Roman G. <sl...@sl...> - 2007-04-22 08:02:35
|
Yes, there are vlans and everything on that network. And linux bridge should be there completely transparent and forward every possible packet/protocol. It looks like it does not do it somehow. hmm Roman Glebov P.S What does trunking mean? > Are you trunking and using vlans? > > Regards, > > Will > > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> i did a test . i have one cisco device before the bridge >> and second cisco device after the bridge. >> >> the first sends the bpdu packets all the time, which are never received >> by >> the second one after the bridge. >> my stp on the bridge is off because it should not participate but simple >> forward all of the traffik. >> >> > hmmmm you will not see bpdu's in snort-inline. What makes you think >> they >> > are >> > not being passed? Do you have stp enabled on the bridge? >> > >> > Regards, >> > >> > Will >> > >> > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> >> >> Sorry, i forgought to tell >> >> It is simple bridge with stp off: >> >> >> >> brctl addbr br0 >> >> brctl addif eth0 >> >> brctl addif eth1 >> >> >> >> ifconfig br0 up >> >> >> >> br0 eth0 eth1 have no adresses. >> >> >> >> I am using debian unstable kernel : >> >> 2.6.18-4-686 >> >> >> >> With regards Roman Glebov >> >> >> >> >> >> > what does your bridge configuration look like? >> >> > >> >> > On 4/21/07, Roman Glebov <sl...@sl...> wrote: >> >> >> >> >> >> Hallo! >> >> >> >> >> >> I found recently out that snort inline or the bridge are not >> >> forwarding >> >> >> any bpdu packets! >> >> >> >> >> >> >> >> >> Is this a known problem or a missconfiguration ? >> >> >> >> >> >> Roman Glebov >> >> >> >> >> >> >> >> >> >> >> >> ------------------------------------------------------------------------- >> >> >> This SF.net email is sponsored by DB2 Express >> >> >> Download DB2 Express C - the FREE version of DB2 express and take >> >> >> control of your XML. No limits. Just data. Click to get it now. >> >> >> http://sourceforge.net/powerbar/db2/ >> >> >> _______________________________________________ >> >> >> Snort-inline-users mailing list >> >> >> Sno...@li... >> >> >> https://lists.sourceforge.net/lists/listinfo/snort-inline-users >> >> >> >> >> > >> >> >> >> >> > >> >> > |