Re: Testing Rule

[James Lay <jlay () slave-tothe-box net>]

You can download some of the pacps there and then run your snort against
it to see how it fares. 

James 

On 2017-07-11 13:34, tantioification . via Snort-users wrote:

> Sorry James,, how to use that pcap file from packettotal.com [1] for testing? 
> i think i just can read that file... 
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists snort org
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

  

Links:
------
[1] http://packettotal.com

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!