[Snort-users] Import data from wireshark to Snort

Lay, James james.lay at ...15009...
Tue Sep 11 15:21:25 EDT 2012


Not sure what you mean by import Nhok, but if you have a packet capture you want to read, you can try, for example:

 

snort –c /etc/snort/snort.conf –r mycapturefile.pcap

 

That will read the packet capture file just like it was on the wire.  Hope that helps.

 

James

 

From: Nhok Maruko [mailto:lieuctk32 at ...11827...] 
Sent: Tuesday, September 11, 2012 2:29 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Import data from wireshark to Snort

 

Hi, everyone. I have some trouble with Snort. i don't know how to import data from wireshark to Snort, so anyone who know please help me?

Thanks


 

-- 
Đường tuy ngắn, không đi, không đến
Việc tuy nhỏ, không làm, không xong.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120911/84120ebf/attachment.html>


More information about the Snort-users mailing list