Snort mailing list archives

Re: Reporting packet number


From: "Russ Combs (rucombs)" <rucombs () cisco com>
Date: Wed, 21 May 2014 22:15:35 +0000


________________________________
From: Beenish Raza [beenish.raza () hotmail com]
Sent: Wednesday, May 21, 2014 6:09 PM
To: snort-devel () lists sourceforge net
Subject: [Snort-devel] Reporting packet number

I am matching a set of regular expressions against a large pcap file. I want snort to report the original packet number 
(like 10th packet of the pcap file reported match) as well when it gives alerts. What command I need to use to do this?

* Please redirect this question to the snort-users list.
------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.
Get unparalleled scalability from the best Selenium testing platform available
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: