diff --git a/pages/common/snort.md b/pages/common/snort.md new file mode 100644 index 000000000..696195a0d --- /dev/null +++ b/pages/common/snort.md @@ -0,0 +1,24 @@ +# snort + +> Open-source network intrusion detection system. +> More information: . + +- Capture packets with verbose output: + +`sudo snort -v -i {{interface}}` + +- Capture packets and dump application layer data with verbose output: + +`sudo snort -vd -i {{interface}}` + +- Capture packets and display link layer packet headers with verbose output: + +`sudo snort -ve -i {{interface}}` + +- Capture packets and save them in the specified directory: + +`sudo snort -i {{interface}} -l {{path/to/directory}}` + +- Capture packets according to rules and save offending packets along with alerts: + +`sudo snort -i {{interface}} -c {{path/to/rules.conf}} -l {{path/to/directory}}`