[Snort-users] Displaying few packets before a matched packet

Arvind S Raj sraj.arvind at ...11827...
Fri Nov 18 10:03:35 EST 2011

Hey everyone,
I'm new to snort and was wondering if this is possible. Suppose a packet is
matched by an alert rule, is it possible to make snort display few of the
preceding packets as well?

Arvind S Raj

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111118/23616b25/attachment.html>

More information about the Snort-users mailing list