[Snort-users] how to create testing data files??

waldo kitty wkitty42 at ...14940...
Tue Aug 17 14:53:18 EDT 2010


On 8/15/2010 19:39, Joel Esler wrote:
> On Aug 14, 2010, at 11:06 PM, waldo kitty wrote:
>
>> On 8/14/2010 22:11, Joel Esler wrote:
>>> Does that help?
>>
>> yes it sure does! thank you muchly :)
>
> Oh, and to further answer, the easiest way to test something is to create it.  Make a webpage or something with whatever you are trying to get Snort to trigger on, and test, test and retest on the pcaps.

yeah, i actually started sending them to myself in emails but based on the 
statement in the snort docs about snort not attempting to validate if the files 
are true pcaps, something is wrong somewhere... either the doc or snort is 
broken as snort really does validate the files...




More information about the Snort-users mailing list