next up previous contents
Next: Logging Up: Tunneling Protocol Support Previous: Tunneling Protocol Support   Contents

Multiple Encapsulations

Snort will not decode more than one encapsulation. Scenarios such as

    Eth IPv4 GRE IPv4 GRE IPv4 TCP Payload

or

    Eth IPv4 IPv6 IPv4 TCP Payload

will not be handled and will generate a decoder alert.



Eugene Misnik 2013-05-08