[Snort-users] playback question

Roelof JT Jonkman roel at ...47...
Fri Nov 9 17:41:01 EST 2001


Greg,

Something like the following might get you there:

snort -vr <file> tcp and host src not 134.117.88.0/20 and host dst 134.117.88.0/20


			roel

--
roel
Silicon Defense: Technical Support for Snort
http://www.SiliconDefense.com





More information about the Snort-users mailing list