Project

General

Profile

Actions

Feature #936

open

support tzsp protocol

Added by Johannes Lavre over 10 years ago. Updated 9 months ago.

Status:
New
Priority:
Normal
Target version:
Effort:
medium
Difficulty:
medium
Label:

Description

Support for TaZmen Sniffer Protocol which is used for exporting 802.11 wireless traffic to a remote sniffer. I am currently setting up packetfence and have suricata enabled as the ids. I have a trapeze wireless controller that has an in build rf snoop feature that exports wireless in tzsp protocol format to a remote host for sniffing. It would be nice if suricata can support this protocol so i can use the wireless controllers in built sniffing feature.

Actions #1

Updated by Victor Julien over 10 years ago

  • Target version set to TBD
Actions #2

Updated by Andreas Herz over 8 years ago

  • Assignee set to Anonymous
Actions #3

Updated by Victor Julien almost 6 years ago

  • Effort set to medium
  • Difficulty set to medium
Actions #4

Updated by Andreas Herz about 5 years ago

  • Assignee set to Community Ticket
Actions #5

Updated by Philippe Antoine 9 months ago

See https://forum.suricata.io/t/suricata-and-pcap-files/727/6

It would be a new source.

Workaround is to use a tool to convert tzsp to pcap

Actions

Also available in: Atom PDF