Snort mailing list archives
Re: [Snort-devel] problems with snort reading from stdin
From: Chris Green <cmg () uab edu>
Date: Wed, 17 Oct 2001 20:31:00 -0500
<tlewis () mindspring com> writes:
On Wed, 17 Oct 2001, Chris Green wrote:Theres no reason I can think of to use tcpdump and snort in a pipe together.You could be pulling a large tcpdump file from, say, a network connection and not have enough space or time to store it on disk locally first.
and you've not got a copy of snort on the machine that first had a copy of the tcpdump file. That said, you've come up with a theoretical situation that I missed although I doubt there was that netcat-like streaming situation by the origninal poster :-) -- Chris Green <cmg () uab edu> You now have 14 minutes to reach minimum safe distance. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: [Snort-devel] problems with snort reading from stdin tlewis (Oct 17)
- Message not available
- Re: [Snort-devel] problems with snort reading from stdin Chris Green (Oct 17)
- Message not available
- <Possible follow-ups>
- Re: [Snort-devel] problems with snort reading from stdin ak (Oct 17)
- Re: [Snort-devel] problems with snort reading from stdin Andreas Krennmair (Oct 24)