[Snort-users] How to send packets to Snort without using pcap.

aneeque khan pieces27 at ...3390...
Wed Nov 13 09:10:38 EST 2013


Hi,



Following are the details of the issue I am facing in snort :-



1. In snort code I have created a new thread and opened up a tcp socket on which I am receiving some packets.

2. Now I want that instead processing the packets coming on my eth0 interface(as snort uses the pcap functionality), Snort will only the packets process coming on my created tcp socket.

3.Is there a way of achieving this.



Please help me out on this.



Thanks & Regards,

Aneeque 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20131113/a15c4b59/attachment.html>


More information about the Snort-users mailing list