[Snort-users] Displaying few packets before a matched packet

Arvind S Raj sraj.arvind at ...11827...
Fri Nov 18 10:03:35 EST 2011


Hey everyone,
I'm new to snort and was wondering if this is possible. Suppose a packet is
matched by an alert rule, is it possible to make snort display few of the
preceding packets as well?

-- 
Arvind S Raj

http://arvindsraj.wordpress.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111118/23616b25/attachment.html>


More information about the Snort-users mailing list