Snort mailing list archives
Re: Snort vs TCPdump
From: Denis Ducamp <Denis.Ducamp () hsc fr>
Date: Wed, 30 May 2001 22:57:33 +0200
On Wed, May 30, 2001 at 09:52:39PM +0200, Jean sébastien Op de Beeck wrote:
Sorry for my English, I'm French
Bonsoir,
Is Snort (I use it) more powerfull than TCPDump (no tested) ?
If by more powerfull you mean the one knowing how to decode the bigger number of application protocols then tcpdump is better, but in this case I prefer to use ethereal. If you mean the one the more humanly readable then snort is better. But if snort is a great sniffer, it's the best IDS, which tcpdump can't be without third parties as shadow per example. Denis. -- Denis.Ducamp () hsc fr --- Hervé Schauer Consultants --- http://www.hsc.fr/ Owl/snort/hping/dsniff en français http://www.groar.org/~ducamp/#sec-trad Owl en français http://www.openwall.com/Owl/fr/ Du bon usage de ... http://usenet-fr.news.eu.org/fr-chartes/rfc1855.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- What does lightweight mean? Anderson, Bill (May 30)
- Re: What does lightweight mean? Martin Roesch (May 30)
- Re: What does lightweight mean? Martin Roesch (May 30)
- Snort vs TCPdump Jean sébastien Op de Beeck (May 30)
- Re: Snort vs TCPdump Denis Ducamp (May 30)
- Re: Snort vs TCPdump Fyodor (Jun 02)
- Re: What does lightweight mean? Martin Roesch (May 30)
- Re: What does lightweight mean? Martin Roesch (May 30)
- Re: What does lightweight mean? Chris Green (May 30)
- Re: What does lightweight mean? Talisker (May 31)
- <Possible follow-ups>
- RE: What does lightweight mean? Steve Halligan (May 30)