Re: Snort and Ethereal

[Alexandre Dulaunoy <adulau-snort () colorado g-inter net>]

You can make a rule to export in tcpdump format (read by ethereal)

 ruletype suspicious
            {
                type log
                output log_tcpdump: suspicious.log
            }

alx

On 5 May 2001, Sascha Ziemann wrote:

> Hi,
>
> is there any way to tell Snort to write packets in a way that can be
> read by Ethereal?
>
> bis sp?ter...
> Sascha


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users