OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Francis Yom (fyomsymmsys.com)
Date: Tue Jul 02 2002 - 16:43:58 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >
    > Try this test: Run snort and tcpdump at the same time. You _should_ see the
    > same packets. If not, it might be the version of pcap each is linked against.
    >

    Bingo! They are NOT! I used the PCAP from the CVS about a month ago.
    What libPCAP should I be using?

    Thanks!
    F

    -------------------------------------------------------
    This sf.net email is sponsored by:ThinkGeek
    No, I will not fix your computer.
    http://thinkgeek.com/sf
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users