[Snort-users] Import data from wireshark to Snort

Lay, James james.lay at ...15009...
Tue Sep 11 15:21:25 EDT 2012

Not sure what you mean by import Nhok, but if you have a packet capture you want to read, you can try, for example:


snort –c /etc/snort/snort.conf –r mycapturefile.pcap


That will read the packet capture file just like it was on the wire.  Hope that helps.




From: Nhok Maruko [mailto:lieuctk32 at ...11827...] 
Sent: Tuesday, September 11, 2012 2:29 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Import data from wireshark to Snort


Hi, everyone. I have some trouble with Snort. i don't know how to import data from wireshark to Snort, so anyone who know please help me?



Đường tuy ngắn, không đi, không đến
Việc tuy nhỏ, không làm, không xong.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120911/84120ebf/attachment.html>

More information about the Snort-users mailing list