[Snort-users] reading from a pcap while listening on eht0 ?

Pratik Narang pratik.cse.bits at ...11827...
Wed Apr 3 03:22:42 EDT 2013


Dear Snort users,

Just wanted to know how to achieve such a thing with Snort-->

While Snort is listening on eth0 ( -i eth0), I want Snort to read from
a pcap file as well. So in a way I want Snort to interpret both
traffics, traffic recevied at eth0 and traffic in the pcap, as a
single flow.

Regards,
Pratik




More information about the Snort-users mailing list