Project

General

Profile

Actions
Copy link

Feature #936

open

support tzsp protocol

Added by Johannes Lavre about 11 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
medium
Difficulty:
medium
Label:

Description

Support for TaZmen Sniffer Protocol which is used for exporting 802.11 wireless traffic to a remote sniffer. I am currently setting up packetfence and have suricata enabled as the ids. I have a trapeze wireless controller that has an in build rf snoop feature that exports wireless in tzsp protocol format to a remote host for sniffing. It would be nice if suricata can support this protocol so i can use the wireless controllers in built sniffing feature.

Actions
Copy link
 #1

Updated by Victor Julien about 11 years ago

  • Target version set to TBD
Actions
Copy link
 #2

Updated by Andreas Herz almost 9 years ago

  • Assignee set to Anonymous
Actions
Copy link
 #3

Updated by Victor Julien over 6 years ago

  • Effort set to medium
  • Difficulty set to medium
Actions
Copy link
 #4

Updated by Andreas Herz over 5 years ago

  • Assignee set to Community Ticket
Actions
Copy link
 #5

Updated by Philippe Antoine over 1 year ago

See https://forum.suricata.io/t/suricata-and-pcap-files/727/6

It would be a new source.

Workaround is to use a tool to convert tzsp to pcap

Actions
Copy link

Also available in: Atom PDF