Snort mailing list archives
Re: Traffic Capture
From: wkitty42 () windstream net
Date: Fri, 8 Dec 2017 04:43:46 -0500
On 12/08/2017 04:20 AM, Syed Hammad Tahir wrote:
I am specifically interested in capturing the ARP request data. Any help will be appreciated.
if all you are wanting to do is capture traffic, why not use tcpdump or wireshark? that's what they do... something like this should do...
tcpdump -i eth0 -s0 -w arp_traffic.pcap 'arp or icmp' check the tcpdump docs to understand the options given... -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list unless* *a signed and pre-paid contract is in effect with us.* _______________________________________________ Snort-sigs mailing list Snort-sigs () lists snort org https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
Current thread:
- Traffic Capture Syed Hammad Tahir (Dec 08)
- Re: Traffic Capture wkitty42 (Dec 08)
- Re: Traffic Capture wkitty42 (Dec 08)
- Re: Traffic Capture Syed Hammad Tahir (Dec 08)
- Re: Traffic Capture Al Lewis (allewi) via Snort-users (Dec 08)
- Re: Traffic Capture Syed Hammad Tahir (Dec 08)