Snort mailing list archives

Snort to process multiple gzipped pcaps?


From: Angelos Marnerides <mindsurfster () gmail com>
Date: Mon, 27 Mar 2017 17:54:09 +0100

Hi,

Is there a snort facility (or potentially an extension) for allowing to
someone to work on multiple compressed (i.e. gzipped) pcaps?

I've tried to pipe the gzip output to snort but with no success (and even
if it was feasible I would have severe memory issues since I have hundreds
of gzipped pcaps)....any suggestions?

Thanks
A.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: