 | 1 | initial version |
Wireshark can't open any Snort alert output format. Is there a format that contains full frames?
https://gitlab.com/wireshark/wireshark/-/wikis/Snort describes how Wireshark can load pcap files and feed them through Snort, then show where/how in the capture any alerts were detected. The Snort post-dissector doesn't currently work for Windows.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
