Snort mailing list archives
Re: Traffic Capture
From: wkitty42 () windstream net
Date: Fri, 8 Dec 2017 04:45:19 -0500
On 12/08/2017 04:20 AM, Syed Hammad Tahir wrote:
I am specifically interested in capturing the ARP request data. Any help will be appreciated.
if all you are wanting to do is capture traffic, why not use tcpdump or wireshark? that's what they do... something like this should do...
tcpdump -i eth0 -s0 -w arp_traffic.pcap 'arp or icmp' check the tcpdump docs to understand the options given... -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list unless* *a signed and pre-paid contract is in effect with us.* _______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
Current thread:
- Traffic Capture Syed Hammad Tahir (Dec 08)
- Re: Traffic Capture wkitty42 (Dec 08)
- Re: Traffic Capture wkitty42 (Dec 08)
- Re: Traffic Capture Syed Hammad Tahir (Dec 08)
- Re: Traffic Capture Al Lewis (allewi) via Snort-users (Dec 08)
- Re: Traffic Capture Syed Hammad Tahir (Dec 08)