Snort mailing list archives

Re: playback question


From: Greg Sarsons <gsarsons () istop com>
Date: 09 Nov 2001 21:10:09 -0500

Roel,

Did you try this and have it work?  

Just tried with 1.8.2-beta1 (Build 85) and I got a ERROR: OpenPcap() FSM
compliation failed: parse error.

It shouldn't matter if I'm running another playback at the same time
doing something else should it.

Greg

On Fri, 2001-11-09 at 20:39, Roelof JT Jonkman wrote:
Greg,

Something like the following might get you there:

snort -vr <file> tcp and host src not 134.117.88.0/20 and host dst 134.117.88.0/20


                      roel

--
roel
Silicon Defense: Technical Support for Snort
http://www.SiliconDefense.com




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: