Snort mailing list archives
Re: Testing Rule
From: Justin Pederson via Snort-users <snort-users () lists snort org>
Date: Tue, 11 Jul 2017 15:26:54 -0500
James I tried this as well with 2 or 3 pcaps and no alerts happened. Can you verify one of the pcaps that will trigger an alert to verify our configuration is correct. On Tue, Jul 11, 2017 at 2:44 PM, James Lay <jlay () slave-tothe-box net> wrote:
You can download some of the pacps there and then run your snort against it to see how it fares. James On 2017-07-11 13:34, tantioification . via Snort-users wrote: Sorry James,, how to use that pcap file from packettotal.com for testing? i think i just can read that file... _______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news! _______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
_______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Testing Rule tantioification . via Snort-users (Jul 08)
- Re: Testing Rule James Lay (Jul 09)
- <Possible follow-ups>
- Re: Testing Rule tantioification . via Snort-users (Jul 11)
- Re: Testing Rule James Lay (Jul 11)
- Re: Testing Rule Justin Pederson via Snort-users (Jul 11)
- Re: Testing Rule James Lay (Jul 11)
- Re: Testing Rule wkitty42 (Jul 11)
- Re: Testing Rule Justin Pederson via Snort-users (Jul 12)
- Re: Testing Rule Al Lewis (allewi) via Snort-users (Jul 12)
- Re: Testing Rule Justin Pederson via Snort-users (Jul 12)
- Re: Testing Rule Al Lewis (allewi) via Snort-users (Jul 12)
- Re: Testing Rule James Lay (Jul 11)