[Snort-users] Re: [Snort-devel] problems with snort reading from stdin

ak at ...3856... ak at ...3856...
Wed Oct 17 13:28:09 EDT 2001


On Wed, 17 Oct 2001, Chris Green wrote:
> Theres no reason I can think of to use tcpdump and snort in a pipe
> together.
Actually, the input comes from another program, not tcpdump, which does
some preprocessing (it "cuts" away certain packets), but I didn't want to
confuse anybody. Nevertheless, reading tcpdump/libpcap capture files from
stdin is definitely _broken_.

Regards,
Andreas Krennmair





More information about the Snort-users mailing list