Re: Snort Instance

[Nicholas Horton <fivetenets () me com>]

Thanks. I'll give it a try.

Nick

> On Oct 30, 2013, at 3:09 PM, James Lay <jlay () slave-tothe-box net> wrote:
>
> > On 2013-10-30 13:05, Nicholas Horton wrote:
> > Just connection log at this point although I'm sure later they will
> > ask for more data.
> >
> > What I just thought of is I guess I can move the pcap to another
> > system and use wire shark and sort there.
> >
> > Just curious still if I can get the connection logs without doing the
> > copy and wire shark and sorting.
> >
> > Nick
>
> I suspect bro-ids.org may be more suited to this task.
>
> James
>
> ------------------------------------------------------------------------------
> Android is increasing in popularity, but the open development platform that
> developers love is also attractive to malware creators. Download this white
> paper to learn more about secure code signing practices that can help keep
> Android apps secure.
> http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!