[Snort-devel] Reporting packet number

Russ Combs (rucombs) rucombs at ...3461...
Wed May 21 18:15:35 EDT 2014


________________________________
From: Beenish Raza [beenish.raza at ...445...]
Sent: Wednesday, May 21, 2014 6:09 PM
To: snort-devel at lists.sourceforge.net
Subject: [Snort-devel] Reporting packet number

I am matching a set of regular expressions against a large pcap file. I want snort to report the original packet number (like 10th packet of the pcap file reported match) as well when it gives alerts. What command I need to use to do this?

* Please redirect this question to the snort-users list.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20140521/50a04810/attachment.html>


More information about the Snort-devel mailing list