[Snort-users] playback question

Greg Sarsons gsarsons at ...3971...
Fri Nov 9 18:11:01 EST 2001


Did you try this and have it work?  

Just tried with 1.8.2-beta1 (Build 85) and I got a ERROR: OpenPcap() FSM
compliation failed: parse error.

It shouldn't matter if I'm running another playback at the same time
doing something else should it.


On Fri, 2001-11-09 at 20:39, Roelof JT Jonkman wrote:
> Greg,
> Something like the following might get you there:
> snort -vr <file> tcp and host src not and host dst
> 			roel
> --
> roel
> Silicon Defense: Technical Support for Snort
> http://www.SiliconDefense.com

More information about the Snort-users mailing list