Re: Fwd: Help: Snort giving alerts on pcap but not on live traffic.

["Gaurav Nagare (gnagare)" <gnagare () cisco com>]

Hi Hanan,
Could you please provide additional details like snort.conf, command line you are using to run Snort and pcap file and 
kind of live traffic you are sending for which you don't see alerts?

Thanks
Gaurav

From: Hanan Liaqat Bhatti <hananliaqatbhatti () gmail com<mailto:hananliaqatbhatti () gmail com>>
Date: Thursday, 5 May 2016 at 10:57 AM
To: "snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>" <snort-users () lists 
sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: [Snort-users] Fwd: Help: Snort giving alerts on pcap but not on live traffic.

Dear recipient,

My snort is giving alerts on pcap but not on live traffic. i have saved pcap traffic using sqlmap tool for SQL 
injection tools. I treid using -k option also but of no use.

Regards,
Adam




Regards,

Adam

------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!