Snort mailing list archives

Re: how to create testing data files??


From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 17 Aug 2010 14:53:18 -0400

On 8/15/2010 19:39, Joel Esler wrote:
On Aug 14, 2010, at 11:06 PM, waldo kitty wrote:

On 8/14/2010 22:11, Joel Esler wrote:
Does that help?

yes it sure does! thank you muchly :)

Oh, and to further answer, the easiest way to test something is to create it.  Make a webpage or something with 
whatever you are trying to get Snort to trigger on, and test, test and retest on the pcaps.

yeah, i actually started sending them to myself in emails but based on the 
statement in the snort docs about snort not attempting to validate if the files 
are true pcaps, something is wrong somewhere... either the doc or snort is 
broken as snort really does validate the files...

------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: