[Snort-users] newbie snort question

/dev/null dev.null at ...6862...
Tue Sep 10 18:33:01 EDT 2002


I'm reading through the manual right now, but haven't seen anything along
these lines just yet.

If I save packets from snort or other util like tcpdump, can I re-run snort
and pass in that packet file and get snort to run as if it were actual
network traffic?

Thanks!

/dev/null 
Available for Consulting.

email: dev.null at ...6862...
web: www.BeginThread.com/dev.null
* Would you like to join BeginThread.com?  Drop me a line, it's FREE!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Status
Type: application/octet-stream
Size: 728 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ArticleCountThousand
Type: application/octet-stream
Size: 47 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ArticleCountHundred
Type: application/octet-stream
Size: 47 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ArticleCountTen
Type: application/octet-stream
Size: 738 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment-0003.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ArticleCountOne
Type: application/octet-stream
Size: 719 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020910/ef38b3a6/attachment-0004.obj>


More information about the Snort-users mailing list