One of my sites is monitoring a link that has all PPPoE traffic on it. The Bro Sensor was not logging the traffic due to it being PPPoE. The bro version was 2.1 stable.
I found this(thank you Seth for writing this) :
https://github.com/bro-ids/bro/commit/908b1a17d1b08a8473695316e56eb98f7b005cbd
and added it to the PktSrc.cc of the Bro2.1 Stable release source. Then recompiled and now my sensor seems to be logging the traffic properly.
This is probably not the best way to do things.
My question is: Will PPPoE support be in 2.2?
Will