next up previous contents
Next: Printing the pcap Up: Examples Previous: Using filters   Contents

Resetting state

    $ snort --pcap-dir=/home/foo/pcaps --pcap-reset

The above example will read all of the files under /home/foo/pcaps, but after each pcap is read, Snort will be reset to a post-configuration state, meaning all buffers will be flushed, statistics reset, etc. For each pcap, it will be like Snort is seeing traffic for the first time.



Eugene Misnik 2013-05-08