argus 3.0.3.x choking on vlan tags?

John Gerth gerth at graphics.stanford.edu
Thu Oct 7 16:00:07 EDT 2010


Our infrastructure is moving from Cisco to HP and today I've
been trying to get argus to work with HP mirror ports.

I can now see packets with tcpdump, but they all have 802.1q
vlan tags on them and my argus 3.0.3x binary now doesn't think
it's seeing anything -- which surprised me.

Does anyone now how to  either:
  a) convince argus to see the packets
  b) tell an HP Procurve 5400 not to tag the monitored packets

-- 
John Gerth      gerth at cs.stanford.edu  Gates 378   (650) 725-3273  fax 723-0033



More information about the argus mailing list