Recently in a test, need to collect the alarm information, but don't know how to replay data sets, how to use snort detection, who did? Be badly in need of help!

CodePudding user response:

Do you understand this? I also want to do this, please give advice or comments!! My QQ: 973594826, add me

CodePudding user response:

Snort installation, use TCPreplay replay

CodePudding user response:

The original poster is online, similar to the original poster problems, can you add the QQ consulting, online, etc., 1347012082

CodePudding user response:

With the need to answer this question, know how to use snort parsing DARPA2000 data sets, or who have DARPA2000 data set application guide, consult, and send the Q - 1508641058, thank you!

CodePudding user response:

Also, if a data set also cloth to the Internet? And kdd99 contains only connection characteristics can't replay?

CodePudding user response:

Refer to the original poster solution to the problem, thank you very much!
Email:
[email protected]

CodePudding user response:

Please teach, thank you very much QQ: 1428590394

CodePudding user response:

Please give advice or comments! Thank you for the great god. [email protected]

CodePudding user response:

I don't know the building Lord still online? Please instruct snort how to replay data set?

CodePudding user response:

The building Lord still there? Refer to
With a snort -r read DARAP2000 packets, the alarm few in number, for your guidance