next up previous contents
Next: Read pcaps from a Up: Examples Previous: Read a single pcap   Contents

Read pcaps from a file

    $ cat foo.txt
    foo1.pcap
    foo2.pcap
    /home/foo/pcaps

    $ snort --pcap-file=foo.txt

This will read foo1.pcap, foo2.pcap and all files under /home/foo/pcaps. Note that Snort will not try to determine whether the files under that directory are really pcap files or not.



Eugene Misnik 2013-05-08