process .gzip pcaps using snort

[Angelos Marnerides <mindsurfster () gmail com>]

Hi,

I have a quite huge number of gzipped pcaps (approx. 500GB compressed size
of pcaps) and I've tried to run (on a single file just to test and then I
would write a shell script to run through all) through snort by first
piping the gzip process to snort...however it seems that this doesn't work.
:

gunzip -c file1.pcap.gz | snort -c /etc/snort/snort.conf -r
Is there any other way round to do this and of course being optimal in
regards of the memory required?

Thanks in advance,
akm
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!