[Snort-users] playback question

Greg Sarsons gsarsons at ...3971...
Fri Nov 9 18:11:01 EST 2001


Roel,

Did you try this and have it work?  

Just tried with 1.8.2-beta1 (Build 85) and I got a ERROR: OpenPcap() FSM
compliation failed: parse error.

It shouldn't matter if I'm running another playback at the same time
doing something else should it.

Greg

On Fri, 2001-11-09 at 20:39, Roelof JT Jonkman wrote:
> Greg,
> 
> Something like the following might get you there:
> 
> snort -vr <file> tcp and host src not 134.117.88.0/20 and host dst 134.117.88.0/20
> 
> 
> 			roel
> 
> --
> roel
> Silicon Defense: Technical Support for Snort
> http://www.SiliconDefense.com
> 






More information about the Snort-users mailing list