[Snort-users] How to send packets to Snort without using pcap.

aneeque khan pieces27 at ...3390...
Wed Nov 13 09:10:38 EST 2013


Following are the details of the issue I am facing in snort :-

1. In snort code I have created a new thread and opened up a tcp socket on which I am receiving some packets.

2. Now I want that instead processing the packets coming on my eth0 interface(as snort uses the pcap functionality), Snort will only the packets process coming on my created tcp socket.

3.Is there a way of achieving this.

Please help me out on this.

Thanks & Regards,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20131113/a15c4b59/attachment.html>

More information about the Snort-users mailing list