[Snort-users] packet traces to test snort

snort-users-admin at lists.sourceforge.net snort-users-admin at lists.sourceforge.net
Mon May 5 06:47:27 EDT 2003

On Fri, 2 May 2003, Budi Rahardjo wrote:

> Is there an archive of (tcpdump) packet traces that I can replay
> to test against our snort configuration?
> I tried idswakeup, but not satisfied with it.
> I was looking at Internet traffic archive web site, but couldn't
> find what I am looking for.

Grab the the Capture the Flag traces from Defcon8/9 [0], and then use
tcpreplay [1] to replay them.


Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

[0]   http://mediawhore.wi2600.org/mirrors/shmoo/
[1]   http://tcpreplay.sourceforge.net/

This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list