[Snort-users] Snort packet files

Dale J. Chatham dale at ...1529...
Tue Mar 13 15:58:45 EST 2001


Snort normally puts its saved packets in files named
<Protocol>:<From-port>-<To-port>

However, at least for IDS362, the ports are swapped.

Can one predict this?

I've written a web interface which gathers the pertinent information with
hyperlinks to, among other things, the packet file.

Does anyone have a clue as to why it's this way or how to properly predict
the packet file name?

Thanks!

-- 





More information about the Snort-users mailing list