Back to Blog
Wireshark online pcap6/13/2023 ![]() ![]() Wireshark and TCPdump are tools which are used widely for a variety of different purposes. A front end IDS interface such as Snorby.The lsof package which can be obtained via yum.Centos 6.x (in my case I am using CentOS 6.4).You should have a reasonable understanding of CentOS.You should have a basic understanding of how Snort IDS works.This article will explain how to set up a secure drop off point for PCAP files whereby the files you upload will be automatically processed by snort without further intervention.But how often do you process your packet capture files through an IDS engine to see what alerts it generates? PCAP files are something which security and network administrators analyse on a regular basis. ![]() Processing of PCAP files with Snort May 1 2013 ![]()
0 Comments
Read More
Leave a Reply. |