next up previous contents
Next: Command line arguments Up: Snort Overview Previous: Statistics Changes   Contents

Reading Pcaps

Instead of having Snort listen on an interface, you can give it a packet capture to read. Snort will read and analyze the packets as if they came off the wire. This can be useful for testing and debugging Snort.


Eugene Misnik 2013-05-08