| [Question] Snort và Wireshark |
11/09/2012 14:52:02 (+0700) | #1 | 269298 |
lieuctk32
Member
![[Minus]](/hvaonline/templates/viet/images/minus.gif "[Minus]") |
0 |
![[Plus]](/hvaonline/templates/viet/images/plus.gif "[Plus]")
|
|
Joined: 29/05/2012 10:44:07
Messages: 4
Offline
|
|
Các bạn cho mình hỏi làm sao để import các packet bắt được từ wireshark sang cho Snort phân tích.
Cám ơn nhiều nhé! |
|
|
| [Question] Snort và Wireshark |
12/09/2012 12:13:25 (+0700) | #2 | 269316 |
IT0405
Member
|
|
0 |
|
|
Joined: 06/07/2012 07:40:28
Messages: 33
Offline
|
|
Mình thường dump các package rồi phân tích, sau đó đưa ra rules thích hợp cho snort chứ không làm ngược lại  |
|
| Dạo này có nhiều vụ hài quá, toàn gặp võ sĩ mồm. |
|
| [Question] Snort và Wireshark |
13/09/2012 09:14:35 (+0700) | #3 | 269350 |
vd_
Member
|
|
0 |
|
|
Joined: 06/03/2010 03:05:09
Messages: 124
Offline
|
|
| snort có thông số read from pcap file |
|
|
| [Question] Snort và Wireshark |
13/09/2012 12:01:47 (+0700) | #4 | 269355 |
![[Avatar]](/hvaonline/images/avatar/0eecd470a1629be722eb0e2e486700cc.png "[Avatar]")
|
tranhuuphuoc
Moderator
|
Joined: 05/09/2004 06:08:09
Messages: 865
Location: Lầu Xanh
Offline
|
|
Tham khảo snort -c /etc/snort/snort.conf -r tranhuuphuoc.pcap
|
|
|
| Users currently in here |
|
1 Anonymous
|
|
Powered by JForum - Extended by HVAOnline
hvaonline.net | hvaforum.net | hvazone.net | hvanews.net | vnhacker.org
1999 - 2013 ©
v2012|0504|218|
|
|
![[Rule]](/hvaonline/templates/viet/images/icon_mini_rule.gif "[Rule]"){kind=icon}
![[Home]](/hvaonline/templates/viet/images/icon_mini_groups.gif "[Home]"){kind=icon}
![[Portal]](/hvaonline/templates/viet/images/icon_mini_portal.gif "[Portal]"){kind=icon}
![[Members]](/hvaonline/templates/viet/images/icon_mini_members.gif "[Members]"){kind=icon}
![[Statistics]](/hvaonline/templates/viet/images/icon_mini_stats.gif "[Statistics]"){kind=icon}
![[Search]](/hvaonline/templates/viet/images/icon_mini_search.gif "[Search]"){kind=icon}
![[Reading Room]](/hvaonline/templates/viet/images/icon_mini_book.gif "[Reading Room]"){kind=icon}
![[Register]](/hvaonline/templates/viet/images/icon_mini_register.gif "[Register]"){kind=icon}
Register![[Login]](/hvaonline/templates/viet/images/icon_mini_login.gif "[Login]"){kind=icon}
Login [
Thảo luận bảo mật
![[Profile]](/hvaonline/templates/viet/images/en_US/icon_profile.gif "[Profile]"){kind=icon}
![[PM]](/hvaonline/templates/viet/images/en_US/icon_pm.gif "[PM]"){kind=icon}
![[Up]](/hvaonline/templates/viet/images/en_US/icon_up.gif "[Up]"){kind=icon}
![[Print Copy]](/hvaonline/templates/viet/images/en_US/icon_print.gif "[Print Copy]"){kind=icon}
![[WWW]](/hvaonline/templates/viet/images/icon_www.gif "[www]"){kind=icon}
![[digg]](/hvaonline/templates/viet/images/digg.gif "[digg]")
![[delicious]](/hvaonline/templates/viet/images/delicious.gif "[delicious]")
![[google]](/hvaonline/templates/viet/images/google.gif "[google]")
![[yahoo]](/hvaonline/templates/viet/images/yahoo.gif "[yahoo]")
![[technorati]](/hvaonline/templates/viet/images/technorati.gif "[technorati]")
![[reddit]](/hvaonline/templates/viet/images/reddit.gif "[reddit]")
![[stumbleupon]](/hvaonline/templates/viet/images/stumbleupon.gif "[stumbleupon]")